xytofs

5 ms·

1. 1.▲
   by xytofs 1y ago

   getClaims() uses a multi-level cache + WebCrypto API to verify JWTs signed with an asymmetric key locally. Cache is this: 1. Origin server is always Supabase Auth, which like all auth servers is difficult to distribute globally. It serves &
2. 2.▲
   Supabase Auth supports anonymous sign-ins(supabase.com)

   16 points by xytofs 2y ago|6 comments
3. 3.▲
   by xytofs 2y ago

   You can just take the Auth server, run it yourself with an AWS RDS instance for example, keep up with updates and be good to go. Yes you get a good UI with Supabase, and even much of that can be hosted yourself.
4. 4.▲
   by xytofs 2y ago

   > how are your security teams ok with exposing your PG server to the internet, relying mainly on RLS? And RLS isn't turned on by default, so full tables are exposed to the public internet by default, behind a rather nice REST API. T
5. 5.▲
   by xytofs 2y ago

   What were the troubles you faced?