supabase / supabase-flutter / 29031762837

87%

push

github

feat(auth): add async getSession() with on-demand refresh (#1563)

## Summary

Adds an async `getSession()` to `GoTrueClient`, alongside the existing
synchronous `currentSession` getter. It returns the current session and,
when the access token has expired, refreshes it on demand before
returning. Concurrent callers share a single refresh through the same
completer-based de-duplication used by `refreshSession`, so an expired
session's refresh token is only spent once (the Dart equivalent of
supabase-js's `_acquireLock`).

When a refresh fails but the access token is still within its real
validity window (it was only inside the 30s expiry margin), the
still-valid session is returned instead of surfacing the error,
mirroring supabase-js's proactive-preserve behavior. Otherwise the
`AuthException` propagates. Returns `null` when there is no session.

Nothing existing changes; `currentSession` stays.

## Outcome

Implemented.

- **Linear:** SDK-1274
- **supabase-js reference:** `GoTrueClient.getSession` / `__loadSession`
(default lockless path)
- **Compliance matrix:** `auth.session.get_session` → `implemented` (was
`partially_implemented`), registered `GoTrueClient.getSession`

## Tests

New `packages/gotrue/test/get_session_test.dart` covers: no session,
valid session (no request), on-demand refresh of an expired session,
concurrent de-duplication, throw when unrefreshable, and the still-valid
proactive-preserve fallback. All pass.

15 of 17 new or added lines in 3 files covered. (88.24%)

4565 of 5268 relevant lines covered (86.66%)

4.05 hits per line