News for hackers. Stuff that matters.

A comment on PostgREST. Parent comment

Re:PostgREST by myrryr on Sunday November 03, 2019 @07:40PM (#21437934)
We used Hasura for a while, but it was too easy for clients to write queries which would take it forever to complete.

Postgrest was better, but we had trouble getting it to work with JWT, and have a reasonable permissions model.

Postgrest was DAMN fast though, it was really nice to work with.

In the end we had to write our own.

[ Parent | on HN ]
Re:PostgREST by maxcan on Sunday November 03, 2019 @07:54PM (#21438006)
FYI query whitelisting is on its way in Hasura which pretty much solves the first issue
[ Parent | on HN ]
Re:PostgREST by praveenweb on Sunday November 03, 2019 @11:19PM (#21439007)
Query whitelisting has been available since beta 1. It is called Allow Lists :) https://docs.hasura.io/1.0/graphql/manual/deployment/allow-l...

We recommend every production app to setup Allow Lists to prevent arbitrary querying.

[ Parent | on HN ]