4 ms·

How is authentication/authorization handled with this stack? Or sign up with email validation and password reset?

• est 3y ago
  RDBMS auth and roles are a thing. They even support mTLS.
• hasty_pudding 3y ago
  It's a little bit involved but doable. https://postgrest.org/en/stable/references/auth.html https://postgrest.org/en/stable/references/auth.html
  • bigEnotation 3y ago
    So where is the secret key stored for signing the JWT? In the front end as well? Edit: Oh I found it here: https://postgrest.org/en/stable/how-tos/sql-user-management.html https://postgrest.org/en/stable/how-tos/sql-user-management.... That’s a pretty neat design. Also an interesting attack surface
  • deleted 3y ago
    [deleted]