11 ms·

quick aside note: i heard great things about supabase and wanted to use it for auth. I wanted to maintain my own db, user tables etc. but using supabase for au

quick aside note: i heard great things about supabase and wanted to use it for auth. I wanted to maintain my own db, user tables etc. but using supabase for auth, this means if need to play w RLS but i had a very simple db design and didn't want to include rls yet. supabase won't let me do it afaik. so i switched to using ory/kratos ultimately. also q, how heavily are we dependent on supabase ecosystem if all we want is the db?

kiwicopple 2y ago
You are not dependent if you just use the database. You can just pg_dump and and take your data to any other postgres service
- geekodour 2y ago
  I meant while using the db, i want to use sqlc and pgx with the postgres db instead of supabase api(s) that should work out right? i haven't tried but i think that should work ootb. edit: yes that should be possible that's what op mentioned
  - kiwicopple 2y ago
    Yes, we have plenty of customers doing just that. You can connect to the pg instance directly or using the connection pooler. You can also disable the Data API (PostgREST) if you want so that you have less security surface area to manage (eg, you don’t need to set up RLS policies if you are connecting only from the server)
    - geekodour 2y ago
      awesome to know! but disabling rls and the data api does sabotage the use of supabase auth right? (in ref. to my previous message, just confirming if my checks were correct) i actually just wanted to use supabase because how convient it was for the entire auth flow. password email, reset etc. having to manually built a ui for it is out of question but the solution I am using right now (ory/kratos) has some cli utilities so that helps but still not as good as supabase auth ui ofc. keep making it better!
      - kiwicopple 2y ago
        You can still use all the Authentication features of supabase Auth if you disable the data APIs (you just don’t need to use RLS for managing Authorization to your data) Supabase is designed to work like LEGO, you add the blocks you want, and we keep everything as modular as possible so that you can combine it with other services like kratos if you prefer

kiwicopple 2y ago

You are not dependent if you just use the database. You can just pg_dump and and take your data to any other postgres service

geekodour 2y ago
I meant while using the db, i want to use sqlc and pgx with the postgres db instead of supabase api(s) that should work out right? i haven't tried but i think that should work ootb. edit: yes that should be possible that's what op mentioned
- kiwicopple 2y ago
  Yes, we have plenty of customers doing just that. You can connect to the pg instance directly or using the connection pooler. You can also disable the Data API (PostgREST) if you want so that you have less security surface area to manage (eg, you don’t need to set up RLS policies if you are connecting only from the server)
  - geekodour 2y ago
    awesome to know! but disabling rls and the data api does sabotage the use of supabase auth right? (in ref. to my previous message, just confirming if my checks were correct) i actually just wanted to use supabase because how convient it was for the entire auth flow. password email, reset etc. having to manually built a ui for it is out of question but the solution I am using right now (ory/kratos) has some cli utilities so that helps but still not as good as supabase auth ui ofc. keep making it better!
    - kiwicopple 2y ago
      You can still use all the Authentication features of supabase Auth if you disable the data APIs (you just don’t need to use RLS for managing Authorization to your data) Supabase is designed to work like LEGO, you add the blocks you want, and we keep everything as modular as possible so that you can combine it with other services like kratos if you prefer