B2B Saas Authentication

/

Frontend SDKs

/

Headless

/

Session Management

/

Get Tokens

Get tokens

Returns the session_token and session_jwt values associated with the logged-in user's active session.

Session tokens are only available if:

  • There is an active session, and

  • The session is not managed via HttpOnly cookies.

If either of these conditions is not met, getTokens will return null.

Note that the Stytch SDK stores the session_token and session_jwt values as session cookies in the user's browser. Those cookies will be automatically included in any request that your frontend makes to a service (such as your backend) that shares the domain set on the cookies, so in most cases, you will not need to explicitly retrieve the session_token and session_jwt values using the getTokens() method. However, we offer this method to serve some unique use cases where explicitly retrieving the tokens may be necessary.

import { useState } from 'react';
import { useStytchB2BClient } from '@stytch/react/b2b';
import { SessionTokens } from '@stytch/vanilla-js/b2b';

export const GetSessionTokens = () => {
  const stytch = useStytchB2BClient();
  const [sessionTokens, setSessionTokens] = useState<SessionTokens | null>(null);

  // Callback to retrieve session tokens on demand
  const handleGetTokens = () => {
    const tokens = stytch.session.getTokens();
    setSessionTokens(tokens);
  };

  return (
    <div>
      <button onClick={handleGetTokens}>Get Session Tokens</button>
      {sessionTokens && (
        <div>
          <p>Session Token: {sessionTokens.session_token}</p>
          <p>Session JWT: {sessionTokens.session_jwt}</p>
        </div>
      )}
    </div>
  );
};