4 ms·

This looks great, however at first peek it doesn't mention anything about auth. Do you have any plans for that? For me this is the topic I most want to just del

by 2mol 6y ago

This looks great, however at first peek it doesn't mention anything about auth. Do you have any plans for that? For me this is the topic I most want to just delegate to the service. Dashboard, realtime stuff, etc are great too. RESTful APIs I can of course get with PostgREST [0], which is insanely excellent, so the value I'm looking for is to have everything managed, from hosting/storage, to security, to all the other annoying nitty-gritty that I'm likely to get wrong. [0]: https://postgrest.org https://postgrest.org

godzillabrennus 6y ago
Any thoughts on Auth0? https://auth0.com/ https://auth0.com/
- 2mol 6y ago
  Love it, used it, mildly dislike the pricing. But generally I'm of the opinion that auth tightly integrated into the platform has a lot of advantages. My dream is to avoid (almost) all glue between my components, I think Firebase became successful in big part because of that.
- tluyben2 6y ago
  I saw this passing by a lot of times, but either I misunderstand the pricing or it is indeed 'enterprise' pricing. Because even small sites I launched have easily 10s of 1000s of users and some have had millions => I cannot see this pricing work at all on any of those without me closing the doors (having margins that are just too small or just making losses) vs making a really good living.
  - nick-garfield 6y ago
    I agree with this. I think Auth0 at one point was building tools for indie devs, but are now focused mostly on enterprises. What have you used instead of Auth0?
    - tluyben2 6y ago
      We have a microservice for this which we use. It's internal and was extracted from systems/practices that grew over years. Basically it works like Auth0 many of the bells and whistles, but it's just a service in our network. And, probably not a surprise, TCO (cost of running/maintaining it) is a rounding error (few $100/month) for millions of users.
- cwhiz 6y ago
  I have found Cognito to be a similar enough, if not more quirky, offering, but at a fraction of the cost. Auth0 is just too expensive.
kiwicopple 6y ago
See my comments on Auth here: https://news.ycombinator.com/item?id=23320443 https://news.ycombinator.com/item?id=23320443 > We want to nail the auth and we're looking at leveraging Postgres' native Row Level Security. This is a tricky task to "generalize" for all businesses but we have some good ideas (we're discussing in our repo if you want to follow - https://github.com/supabase/supabase https://github.com/supabase/supabase) > RESTful APIs I can of course get with PostgREST That's what we use! See our supporting libraries: https://github.com/supabase/postgrest-js https://github.com/supabase/postgrest-js https://github.com/supabase/postgrest-rs https://github.com/supabase/postgrest-rs https://github.com/supabase/postgrest-py https://github.com/supabase/postgrest-py (coming soon) Also, I'm a long time user and a huge fan. My previous company is featured on their docs (blog post: https://paul.copplest.one/blog/nimbus-tech-2019-04.html#api-layer https://paul.copplest.one/blog/nimbus-tech-2019-04.html#api-...)
- 2mol 6y ago
  Oh, that's super cool! I'm even more excited for your project in that case. I hope I can make the time to build a prototype, right now I'm doing the same for retool, and I feel very spoiled for good choices all of a sudden when it comes to backend abstractions.
  - kiwicopple 6y ago
    nice - if you build something and want it featured, let us know: alpha@supabase.io
- nicoburns 6y ago
  You might want to look into how Hasura does auth. IMO it's really well thought through. However, it doesn't handle the actual authentication, just the access permissions afterwards. If you could layer firebase-style auth "strategies" (email/password, Facebook, Open ID, etc) on top of that kind of system, while keeping everything accessible directly in the main database, that'd be pretty awsome.
  - chrisweekly 6y ago

by 2mol 6y ago

godzillabrennus 6y ago

Any thoughts on Auth0? https://auth0.com/ https://auth0.com/

2mol 6y ago
Love it, used it, mildly dislike the pricing. But generally I'm of the opinion that auth tightly integrated into the platform has a lot of advantages. My dream is to avoid (almost) all glue between my components, I think Firebase became successful in big part because of that.
tluyben2 6y ago
I saw this passing by a lot of times, but either I misunderstand the pricing or it is indeed 'enterprise' pricing. Because even small sites I launched have easily 10s of 1000s of users and some have had millions => I cannot see this pricing work at all on any of those without me closing the doors (having margins that are just too small or just making losses) vs making a really good living.
- nick-garfield 6y ago
  I agree with this. I think Auth0 at one point was building tools for indie devs, but are now focused mostly on enterprises. What have you used instead of Auth0?
  - tluyben2 6y ago
    We have a microservice for this which we use. It's internal and was extracted from systems/practices that grew over years. Basically it works like Auth0 many of the bells and whistles, but it's just a service in our network. And, probably not a surprise, TCO (cost of running/maintaining it) is a rounding error (few $100/month) for millions of users.
cwhiz 6y ago
I have found Cognito to be a similar enough, if not more quirky, offering, but at a fraction of the cost. Auth0 is just too expensive.

kiwicopple 6y ago

See my comments on Auth here: https://news.ycombinator.com/item?id=23320443 https://news.ycombinator.com/item?id=23320443 > We want to nail the auth and we're looking at leveraging Postgres' native Row Level Security. This is a tricky task to "generalize" for all businesses but we have some good ideas (we're discussing in our repo if you want to follow - https://github.com/supabase/supabase https://github.com/supabase/supabase) > RESTful APIs I can of course get with PostgREST That's what we use! See our supporting libraries: https://github.com/supabase/postgrest-js https://github.com/supabase/postgrest-js https://github.com/supabase/postgrest-rs https://github.com/supabase/postgrest-rs https://github.com/supabase/postgrest-py https://github.com/supabase/postgrest-py (coming soon) Also, I'm a long time user and a huge fan. My previous company is featured on their docs (blog post: https://paul.copplest.one/blog/nimbus-tech-2019-04.html#api-layer https://paul.copplest.one/blog/nimbus-tech-2019-04.html#api-...)

2mol 6y ago
Oh, that's super cool! I'm even more excited for your project in that case. I hope I can make the time to build a prototype, right now I'm doing the same for retool, and I feel very spoiled for good choices all of a sudden when it comes to backend abstractions.
- kiwicopple 6y ago
  nice - if you build something and want it featured, let us know: alpha@supabase.io
nicoburns 6y ago
You might want to look into how Hasura does auth. IMO it's really well thought through. However, it doesn't handle the actual authentication, just the access permissions afterwards. If you could layer firebase-style auth "strategies" (email/password, Facebook, Open ID, etc) on top of that kind of system, while keeping everything accessible directly in the main database, that'd be pretty awsome.
- chrisweekly 6y ago