Per-request config — mobile vs web

NestAuthModule.forRoot({
  // …
  session: {
    accessTokenType: null,        // start in auto-detect mode
  },
 
  resolveConfig(ctx) {
    const platform = ctx.request.headers['x-platform'] as string | undefined;
 
    if (platform === 'mobile' || platform === 'react-native') {
      return {
        session: {
          accessTokenType: 'header',
          accessTokenValidity: '30m',     // longer for mobile
          refreshTokenValidity: '30d',
        },
      };
    }
 
    return {
      session: {
        accessTokenType: 'cookie',
        accessTokenValidity: '15m',
      },
    };
  },
});

// mobile app
new AuthClient({
  baseUrl: 'https://api.example.com',
  accessTokenType: 'header',
});
 
// global request header — set on every request
client.onTokensSet(() => {
  /* mobile-specific */
});

const adapter = new FetchAdapter();
const original = adapter.request.bind(adapter);
adapter.request = (opts) => original({
  ...opts,
  headers: { ...opts.headers, 'x-platform': 'mobile' },
});
 
new AuthClient({ baseUrl, httpAdapter: adapter });