Files
better-auth/.changeset/session-cache-null-user.md
Bereket Engida 34834bab53 fix(core): tolerate a null cached user in the session secondary-storage cache
createSession could cache a session with no user when the post-write
user lookup raced replica lag, and findSession/findSessions then threw
trying to read date fields off that null user until the entry expired.

createSession now retries the user lookup once before writing the
cache entry, and findSession/findSessions lazily re-resolve a cached
session with no user instead of throwing, repairing the entry when the
user is found and falling back to a miss only once it's confirmed gone.

Fixes better-auth/better-auth#10884
2026-09-30 07:42:05 -07:00

405 B

better-auth
better-auth
patch

Fix findSession/findSessions throwing when a secondary-storage cache entry was written with a null user (e.g. replica lag right after sign-up). createSession now retries the user lookup once before caching, and the read paths lazily re-resolve and repair a cached session with no user instead of crashing, falling back to a miss only once the user is confirmed gone.