5 ms·

I am now building on Hasura. Love the experience overall, but some aspects are frustrating. For example, setting up authentication for a React Native (Expo) app

I am now building on Hasura. Love the experience overall, but some aspects are frustrating. For example, setting up authentication for a React Native (Expo) app with Auth0 is quite cumbersome, and the docs are a bit out of date.

tango12 5y ago
Thanks! Could you point us to the docs you were looking at for the auth0 integration?
dahdum 5y ago
In your setup, Hasura is verifying a claim inside the JWT returned from Auth0 right? The only Hasura configuration I remember was setting the Auth0 public key and creating roles. I struggled with React/Cognito/AzureAD/Amplify but Hasura wasn't the pain point.
notsureaboutpg 5y ago
I built an Expo app on top of Hasura and rolled my own passwordless authentication mechanism and it was far far easier than using Auth0, imo. Auth was done using serverless functions to send emails with one-time-use tokens, to match the received one-time-use tokens with those generated in the database, and to return JWTs which the clients can use to auth later on and which grant access to different roles (it was an app with roles for managers, employees, etc.) You can even implement refresh token / auth token with rotation relatively simply. I felt Auth0 makes these things complicated to implement, whereas implementing them took only a few days and the docs / help online on how to do so are very good these days.
- realce 5y ago
  I rolled a very similar solution with django+graphene+hasura
  - Dystopian 5y ago
    +1 that's probably my favorite way of doing it - https://github.com/martin-hasura/blog-django-graphql-hasura https://github.com/martin-hasura/blog-django-graphql-hasura Even Django REST Framework and Hasura works pretty well cause you get auth + then if you want to do functions you get that for 'free' as well
diveanon 5y ago
you should take a look at https://create-full-stack.com/ https://create-full-stack.com/ the mobile app it generates is react-native with auth0 already included. It uses hasura as a backend, the pulumi config will deploy it to ECS for you if want. tbh though I don't see how this is a problem with hasura and just a auth0/RN issue.

tango12 5y ago

Thanks! Could you point us to the docs you were looking at for the auth0 integration?

dahdum 5y ago

In your setup, Hasura is verifying a claim inside the JWT returned from Auth0 right? The only Hasura configuration I remember was setting the Auth0 public key and creating roles. I struggled with React/Cognito/AzureAD/Amplify but Hasura wasn't the pain point.

notsureaboutpg 5y ago

I built an Expo app on top of Hasura and rolled my own passwordless authentication mechanism and it was far far easier than using Auth0, imo. Auth was done using serverless functions to send emails with one-time-use tokens, to match the received one-time-use tokens with those generated in the database, and to return JWTs which the clients can use to auth later on and which grant access to different roles (it was an app with roles for managers, employees, etc.) You can even implement refresh token / auth token with rotation relatively simply. I felt Auth0 makes these things complicated to implement, whereas implementing them took only a few days and the docs / help online on how to do so are very good these days.

realce 5y ago
I rolled a very similar solution with django+graphene+hasura
- Dystopian 5y ago
  +1 that's probably my favorite way of doing it - https://github.com/martin-hasura/blog-django-graphql-hasura https://github.com/martin-hasura/blog-django-graphql-hasura Even Django REST Framework and Hasura works pretty well cause you get auth + then if you want to do functions you get that for 'free' as well

diveanon 5y ago

you should take a look at https://create-full-stack.com/ https://create-full-stack.com/ the mobile app it generates is react-native with auth0 already included. It uses hasura as a backend, the pulumi config will deploy it to ECS for you if want. tbh though I don't see how this is a problem with hasura and just a auth0/RN issue.