How to Refresh a Session Token in Supabase

1// The client handles refresh automatically — this just works
2import { createClient } from '@supabase/supabase-js'
3
4const supabase = createClient(
5  process.env.NEXT_PUBLIC_SUPABASE_URL!,
6  process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!
7)
8
9// autoRefreshToken is true by default
10// The client will refresh the token ~12 minutes before expiry (for 1-hour tokens)

1import { supabase } from '@/lib/supabase'
2
3const { data: { subscription } } = supabase.auth.onAuthStateChange(
4  (event, session) => {
5    switch (event) {
6      case 'TOKEN_REFRESHED':
7        console.log('Token was refreshed at:', new Date().toISOString())
8        console.log('New expiry:', new Date(session!.expires_at! * 1000).toISOString())
9        break
10      case 'SIGNED_OUT':
11        console.log('User signed out')
12        break
13      case 'SIGNED_IN':
14        console.log('User signed in')
15        break
16    }
17  }
18)
19
20// Clean up when done
21// subscription.unsubscribe()

1// Force a manual refresh
2const { data: { session }, error } = await supabase.auth.refreshSession()
3
4if (error) {
5  console.error('Refresh failed:', error.message)
6  // If refresh fails, the refresh token is likely expired
7  // Redirect the user to login
8  window.location.href = '/login'
9} else {
10  console.log('New session:', session)
11  console.log('Token expires at:', new Date(session!.expires_at! * 1000))
12}
13
14// You can also pass an existing refresh token explicitly
15const { data, error: err } = await supabase.auth.refreshSession({
16  refresh_token: 'your-refresh-token-here'
17})

1import { supabase } from '@/lib/supabase'
2
3supabase.auth.onAuthStateChange((event, session) => {
4  if (event === 'SIGNED_OUT') {
5    // Session expired and could not be refreshed
6    // Clear any local state
7    localStorage.removeItem('user-preferences')
8    // Redirect to login
9    window.location.href = '/login'
10  }
11})
12
13// Wrap API calls to handle expired tokens
14async function fetchWithAuth(tableName: string) {
15  const { data, error } = await supabase
16    .from(tableName)
17    .select('*')
18
19  if (error?.message?.includes('JWT expired')) {
20    // Try to refresh
21    const { error: refreshError } = await supabase.auth.refreshSession()
22    if (refreshError) {
23      window.location.href = '/login'
24      return null
25    }
26    // Retry the original request
27    const { data: retryData } = await supabase.from(tableName).select('*')
28    return retryData
29  }
30
31  return data
32}