JavaScript: Retrieve a session

Returns the session, refreshing it if necessary.

The session returned can be null if the session is not detected which can happen in the event a user is not signed-in or has logged out.

IMPORTANT: This method loads values directly from the storage attached to the client. If that storage is based on request cookies for example, the values in it may not be authentic and therefore it's strongly advised against using this method and its results in such circumstances. A warning will be emitted if this is detected. Use #getUser() instead.

• This method retrieves the current local session (i.e local storage).
• The session contains a signed JWT and unencoded session data.
• Since the unencoded session data is retrieved from the local storage medium, do not rely on it as a source of trusted data on the server. It could be tampered with by the sender. If you need verified, trustworthy user data, call getUser instead.
• If the session has an expired access token, this method will use the refresh token to get a new session.

Examples

Get the session data

const { data, error } = await supabase.auth.getSession()