How to fix refresh_token_not_found: Refresh token not found in Supabase

import { createClient } from '@supabase/supabase-js'

const supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY)

// Check current session
const { data: { session }, error } = await supabase.auth.getSession()
console.log('Session:', session)
console.log('Error:', error)

// Check if user is authenticated
const { data: { user } } = await supabase.auth.getUser()
console.log('User:', user)

// For web apps that need persistence across browser restarts
const supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
  auth: {
    storage: localStorage, // Default - persists across browser restarts
    autoRefreshToken: true,
    persistSession: true,
    detectSessionInUrl: true
  }
})

// For mobile apps or secure contexts
const supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
  auth: {
    storage: AsyncStorage, // React Native
    autoRefreshToken: true,
    persistSession: true
  }
})

// For server-side rendering (Next.js, Nuxt)
const supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
  auth: {
    storage: {
      getItem: (key) => {
        // Implement secure server-side storage
      },
      setItem: (key, value) => {
        // Implement secure server-side storage
      },
      removeItem: (key) => {
        // Implement secure server-side storage
      }
    }
  }
})

// Subscribe to auth state changes
const { data: { subscription } } = supabase.auth.onAuthStateChange(
  (event, session) => {
    console.log('Auth event:', event)
    console.log('Session:', session)

    // Handle specific events
    switch (event) {
      case 'SIGNED_IN':
        // Session created, store tokens
        break
      case 'TOKEN_REFRESHED':
        // Tokens refreshed successfully
        break
      case 'SIGNED_OUT':
        // Clear local storage
        localStorage.removeItem('supabase.auth.token')
        break
      case 'USER_UPDATED':
        // User data updated
        break
    }
  }
)

// Clean up subscription when component unmounts
subscription.unsubscribe()

// Create a broadcast channel for auth state
const authChannel = new BroadcastChannel('supabase-auth')

// Listen for auth events from other tabs
authChannel.onmessage = (event) => {
  if (event.data.type === 'SIGNED_IN' || event.data.type === 'SIGNED_OUT') {
    // Sync auth state across tabs
    window.location.reload()
  }
}

// Broadcast auth events
const { data: { subscription } } = supabase.auth.onAuthStateChange(
  (event, session) => {
    authChannel.postMessage({ type: event, session })
  }
)

// Or use localStorage events as fallback
window.addEventListener('storage', (event) => {
  if (event.key === 'supabase.auth.token') {
    // Auth state changed in another tab
    window.location.reload()
  }
})

async function handleAuthError(error) {
  console.error('Auth error:', error)

  if (error.message.includes('refresh_token_not_found')) {
    // Refresh token is missing
    console.log('Refresh token not found, attempting recovery...')

    // Option 1: Redirect to login
    // window.location.href = '/login'

    // Option 2: Try to get new session
    const { error: refreshError } = await supabase.auth.refreshSession()

    if (refreshError) {
      // Refresh failed, clear storage and redirect
      await supabase.auth.signOut()
      localStorage.clear()
      window.location.href = '/login?error=session_expired'
    }
  }
}

// Use in your auth calls
try {
  const { data, error } = await supabase.auth.getSession()
  if (error) await handleAuthError(error)
} catch (err) {
  await handleAuthError(err)
}

-- Check if sessions exist for user
SELECT * FROM auth.sessions
WHERE user_id = 'user-uuid-here'
ORDER BY created_at DESC
LIMIT 5;

-- Check for session limits
SELECT count(*) as session_count FROM auth.sessions
WHERE user_id = 'user-uuid-here';