4 ms·
We used Hasura for a while, but it was too easy for clients to write queries which would take it forever to complete. Postgrest was better, but we had trouble
by myrryr 7y ago
We used Hasura for a while, but it was too easy for clients to write queries which would take it forever to complete.
Postgrest was better, but we had trouble getting it to work with JWT, and have a reasonable permissions model.
Postgrest was DAMN fast though, it was really nice to work with.
In the end we had to write our own.
- maxcan 7y agoFYI query whitelisting is on its way in Hasura which pretty much solves the first issue
- praveenweb 7y agoQuery whitelisting has been available since beta 1. It is called Allow Lists :) https://docs.hasura.io/1.0/graphql/manual/deployment/allow-list.html https://docs.hasura.io/1.0/graphql/manual/deployment/allow-l... We recommend every production app to setup Allow Lists to prevent arbitrary querying.