12 replies

Session Loss on iOS (Random) and Android (Background/Foreground) - Expo App

Expo

Environment:
-

better-auth

better-auth

: 1.4.5
-

@better-auth/expo

@better-auth/expo

: 1.4.5
-

expo-secure-store

expo-secure-store

: (SecureStore)
- React Native / Expo (iOS + Android)
- Backend: Hono with Drizzle adapter (PostgreSQL)

---

Issue Summary:

We're experiencing unexpected session loss / random logouts on our mobile app:

1. iOS: Users are randomly logged out - no clear pattern yet, but seems related to backgrounding and then foregrounding the app as well. Just much more infrequent.
2. Android: Specific users report being logged out after backgrounding and then foregrounding the app

---

Server-Side Session Config:

session: {
  expiresIn: 60 * 60 * 24 * 30, // 30 days
  updateAge: 60 * 60 * 24, // 1 day
  cookieCache: {
    enabled: true,
    maxAge: 60 * 5, // 5 minutes
  },
},
cookies: {
  session_token: {
    attributes: {
      sameSite: 'lax',
      secure: true,
      httpOnly: true,
    },
  },
},
advanced: {
  crossSubDomainCookies: {
    enabled: true, // production only
    domain: 'myapp.com',
  },
},
plugins: [expo()],

session: {
  expiresIn: 60 * 60 * 24 * 30, // 30 days
  updateAge: 60 * 60 * 24, // 1 day
  cookieCache: {
    enabled: true,
    maxAge: 60 * 5, // 5 minutes
  },
},
cookies: {
  session_token: {
    attributes: {
      sameSite: 'lax',
      secure: true,
      httpOnly: true,
    },
  },
},
advanced: {
  crossSubDomainCookies: {
    enabled: true, // production only
    domain: 'myapp.com',
  },
},
plugins: [expo()],

---

Client-Side Config (Expo):

export const expoAuthClient = createAuthClient({
  baseURL: baseUrl,
  plugins: [
    expoClient({
      scheme: 'myapp', // dynamic per environment
      storagePrefix: 'myapp',
      storage: authStorage, // custom SecureStore wrapper
    }),
    magicLinkClient(),
    adminClient(),
  ],
})

export const expoAuthClient = createAuthClient({
  baseURL: baseUrl,
  plugins: [
    expoClient({
      scheme: 'myapp', // dynamic per environment
      storagePrefix: 'myapp',
      storage: authStorage, // custom SecureStore wrapper
    }),
    magicLinkClient(),
    adminClient(),
  ],
})

---

Questions:

1. Are there any known issues with

@better-auth/expo

@better-auth/expo

session persistence on iOS or Android?
2. Could the

cookieCache

cookieCache

with 5-minute TTL cause issues when the app is backgrounded for longer periods?
3. Is there recommended configuration for mobile apps to prevent session loss during background/foreground transitions?
4. Should we be implementing any manual session refresh logic, or does the expo plugin handle this automatically?
5. Any known interactions between

crossSubDomainCookies

crossSubDomainCookies

and the Expo plugin that could cause issues?

Session Loss on iOS (Random) and Android (Background/Foreground) - Expo App

Expo

Environment:
-

better-auth

better-auth

: 1.4.5
-

@better-auth/expo

@better-auth/expo

: 1.4.5
-

expo-secure-store

expo-secure-store

session: {
  expiresIn: 60 * 60 * 24 * 30, // 30 days
  updateAge: 60 * 60 * 24, // 1 day
  cookieCache: {
    enabled: true,
    maxAge: 60 * 5, // 5 minutes
  },
},
cookies: {
  session_token: {
    attributes: {
      sameSite: 'lax',
      secure: true,
      httpOnly: true,
    },
  },
},
advanced: {
  crossSubDomainCookies: {
    enabled: true, // production only
    domain: 'myapp.com',
  },
},
plugins: [expo()],

session: {
  expiresIn: 60 * 60 * 24 * 30, // 30 days
  updateAge: 60 * 60 * 24, // 1 day
  cookieCache: {
    enabled: true,
    maxAge: 60 * 5, // 5 minutes
  },
},
cookies: {
  session_token: {
    attributes: {
      sameSite: 'lax',
      secure: true,
      httpOnly: true,
    },
  },
},
advanced: {
  crossSubDomainCookies: {
    enabled: true, // production only
    domain: 'myapp.com',
  },
},
plugins: [expo()],

---

Client-Side Config (Expo):

export const expoAuthClient = createAuthClient({
  baseURL: baseUrl,
  plugins: [
    expoClient({
      scheme: 'myapp', // dynamic per environment
      storagePrefix: 'myapp',
      storage: authStorage, // custom SecureStore wrapper
    }),
    magicLinkClient(),
    adminClient(),
  ],
})

export const expoAuthClient = createAuthClient({
  baseURL: baseUrl,
  plugins: [
    expoClient({
      scheme: 'myapp', // dynamic per environment
      storagePrefix: 'myapp',
      storage: authStorage, // custom SecureStore wrapper
    }),
    magicLinkClient(),
    adminClient(),
  ],
})

---

Questions:

1. Are there any known issues with

@better-auth/expo

@better-auth/expo

session persistence on iOS or Android?
2. Could the

cookieCache

cookieCache

crossSubDomainCookies

crossSubDomainCookies

and the Expo plugin that could cause issues?

Session Loss on iOS (Random) and Android (Background/Foreground) - Expo App

Session Loss on iOS (Random) and Android (Background/Foreground) - Expo App

Similar Threads

Similar Threads

Similar Threads