I am currently making a file storage system for organizations as a side project , using next auth for the authentication(I don’t know how to roll my auth). Now the issue i am having is whenever i refresh the page , the session disappears for some seconds.

Now this is where the problem is , as the session disappears , some routes are protected in the middleware.ts file. So immediately , the routes get locked. So how can i save session so that maybe if there is a 1 minute network blackout , i won’t get locked out immediately.

I have ruled the idea of saving in local because if the network gets switched off completely , it would still be saved in there. And you cannot revalidate local storage based on “network timeout” . I would appreciate your help on this

@qtguru please i would need your expert opinion here

you didn't mention the technology your using to implement the authentication.how do you someone will be in the know how to be of help to you.

eazycash:
you didn't mention the technology your using to implement the authentication.how do you someone will be in the know how to be of help to you.

NextAuth , Next Js 13 app directory

I'll try to give you general guidance here since this is an authentication problem, irrespective of technology used; also because I'm not necessarily a nextjs engineer. However, I'm aware that NextAuth uses JSON Web Tokens (JWTs) for managing user-sessions, with the option to persist session info in a database.

Without knowing the specifics of your implementation and authentication needs, I can only advise that you pay attention to the expiration-time (Time To Live) set for the generated JWTs after you authenticate a user for the first time. When you increase the TTL of your tokens, you allow the user session to live a bit longer.

That been said, if as part of your authentication flow, you maintain both a "refresh" and "access" token, then, you may have to decide which of the tokens' TTL you want to increase to satisfy the authentication need of your solution.

I hope this helps.

NextAuth handles that automatically, check if maybe you not doing something correctly.