supertokens-core
supertokens-core copied to clipboard
fix: session creation - checking tenant for user
Summary of change
When creating a session for a userId which is known by ST, check if the user is part of that tenant.
Related issues
- Link to issue1 here
- Link to issue1 here
Test Plan
(Write your test plan here. If you changed any code, please provide us with clear instructions on how you verified your changes work. Bonus points for screenshots and videos!)
Documentation changes
(If relevant, please create a PR in our docs repo, or create a checklist here highlighting the necessary changes)
Checklist for important updates
- [x] Changelog has been updated
- [ ] If there are any db schema changes, mention those changes clearly
- [x]
coreDriverInterfaceSupported.json
file has been updated (if needed) - [ ]
pluginInterfaceSupported.json
file has been updated (if needed) - [x] Changes to the version if needed
- In
build.gradle
- In
- [ ] If added a new paid feature, edit the
getPaidFeatureStats
function in FeatureFlag.java file - [x] Had installed and ran the pre-commit hook
- [ ] If there are new dependencies that have been added in
build.gradle
, please make sure to add them inimplementationDependencies.json
. - [ ] Update function
getValidFields
inio/supertokens/config/CoreConfig.java
if new aliases were added for any core config (similar to theaccess_token_signing_key_update_interval
config alias). - [x] Issue this PR against the latest non released version branch.
- To know which one it is, run find the latest released tag (
git tag
) in the formatvX.Y.Z
, and then find the latest branch (git branch --all
) whoseX.Y
is greater than the latest released tag. - If no such branch exists, then create one from the latest released branch.
- To know which one it is, run find the latest released tag (
- [ ] If added a foreign key constraint on
app_id_to_user_id
table, make sure to delete from this table when deleting the user as well ifdeleteUserIdMappingToo
is false.