authentication

Question 💬

session param in session callback is typed as Session but in reality, it can also be undefined.

How to reproduce ☕️

Add a session callback:

session: async ({ session, token, user }) => {
      token?.user ? (session.user = token.user as User) : (session.user = user)
      if (token.providerType) session.providerType = token.providerType
      return session
  

There was an error where someone was trying to sign up using the thirdparty recipe and postgres rejected the query cause of value too long for type character varying(128) - and in the thidparty table, only the third_party_user_id column has 128 chars limit.

Error log reference:

[https://app.zenhub.com/files/231921809/8968d6d6-bcdd-48d8-aa60-fd556e934acd/download](https://app.zenhub.com/files

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta