Supabase introduces MFA support(supabase.com) |
Supabase introduces MFA support(supabase.com) |
In case it's not clear - MFA is Multi Factor Authentication, and this one is for you, the developer, to use within your own apps
The neat thing about this one is that it flows all the way through to the JWT so that you can use it in a Postgres Row Level Security Policy:
create policy "Enforce MFA for all end users."
on table_name
as restrictive
to authenticated
using ( auth.jwt()->>'aal' = 'aal2' );
A few of the team will be here to answer questions
Did you port the libraries to TypeScript? Or is the enteprise/managed cloud hosted infrastructure reliant on Go for internal things not available on the self hosted option?
Supabase Auth uses GoTrue, which is a Go server. It's all open-source, so you can self host it as much as you want.
What’s the ideal use case for Supabase? It seems oriented towards “serverless” apps given the mentions of edge functions, but does it fit in as a component of an app with a more traditional back end?
We provide additional tools that make it easy to use/connect to the database (PostgREST, pgbouncer, etc), but these are completely optional
There are already great platforms out there (e.g. Netlify and Vercel), whereas there are still a lot of unsolved problems in the database/postgres space. We're focusing on database problems first-and-foremost and the backlog hasn't shrunk enough to even think about website hosting.
If you need it sooner feel free to reach out, my contact details are in my profile.
How to do Custom Authentication? For example, LDAP Auth is not possible in the current version. And I still don't quite understand the API to implement it myself. Can you kindly provide me some pointers on how to do that? I don't need LDAP specifically, but just a dummy custom authentication code?
I don't want to answer here without the advice of the Auth team because custom authentication code has the potential of being unsafe. I've flagged it with them and they will make sure that you get a response.
I appreciate the answer!
You can see how it fits into the full Supabase Architecture here: https://supabase.com/docs/guides/getting-started/architectur...
LDAP auth is the only thing stopping me from using Supabase.
Link to code example https://github.com/OneSignalDevelopers/onesignal-supabase-sa...
I believe the unfortunate situation with Push Notifications for Android is that you still need to sign up for Firebase project (because you need a Google/Firebase Server API Key).