supabase / supabase-flutter / 38905520141

92%

Build Type

push

github

Committed by web-flow

Commit Message

fix(auth)!: throw AuthSessionMissingException when a token response has no session (#1970)

## What

The auth methods that always return a `Session` now throw
`AuthSessionMissingException` when the server response carries no
session, instead of a plain `AuthException` without an `errorCode`.
Callers can catch the case by type or by `errorCode` (`session_missing`)
rather than matching on the message.

This covers every method backed by the shared helper:
`signInAnonymously`, `signInWithPassword`, `signInWithIdToken`,
`signInWithWeb3`, `linkIdentityWithIdToken`,
`passkey.verifyAuthentication` (and with it `signInWithPasskey` and
`signInWithRestoreKey`) and `refreshSession`.

`setInitialSession` and `recoverSession`, which already reported
`session_missing` for a stored session missing data, now throw the same
type too, so `on AuthSessionMissingException` catches every
`session_missing` failure.

The exception also carries the `requestId` of the response, so these
call sites now use `requestWithResponse` to hand the helper the response
headers.

## Breaking change

`AuthSessionMissingException` takes its `message` as a named parameter,
next to the new `requestId`, in line with the other auth exceptions.
`MIGRATION.md` is updated in the existing sections that described these
methods throwing an `AuthException` and `AuthSessionMissingException`
being raised without a request.

Refresh behavior is unchanged: the exception is still a non-retryable
`AuthException`, so a refresh that gets no session back signs out as
before.

## Tests

`missing_session_response_test.dart` now covers every method above and
asserts the type, `errorCode` and `requestId`. The `refreshSession` case
starts signed in and checks that it signs out with
`SignOutReason.sessionExpired`.

Fixes SDK-2260

Coverage Stats

12 of 13 new or added lines in 3 files covered. (92.31%)

43 existing lines in 2 files now uncovered.

9648 of 10488 relevant lines covered (91.99%)

5.44 hits per line