Unexpected auth success
I have Better Auth setup, but I was resetting my DB so I deleted all entries from the user, session, account and verification tables. However, to my surprise, the previously logged-in user could continue making successful requests - even after the 5 min token cache expiry. Does this mean I don't have Better Auth setup correctly?
The endpoint for sure requires auth - it's just accepting a cookie from a user that is supposed to no longer exist
0 Replies