Supabase introduces MFA support

Re:Supabase introduces MFA support by kiwicopple on Wednesday December 14, 2022 @10:33AM (#33984884)

hey HN, supabase ceo here

In case it's not clear - MFA is Multi Factor Authentication, and this one is for you, the developer, to use within your own apps

The neat thing about this one is that it flows all the way through to the JWT so that you can use it in a Postgres Row Level Security Policy:

    create policy "Enforce MFA for all end users."
      on table_name
      as restrictive
      to authenticated
      using ( auth.jwt()->>'aal' = 'aal2' );

You can see the `aal`, which is "Authenticator Assurance Level". This is aal1 for "no MFA", aal2 is 2 factor auth, etc...

A few of the team will be here to answer questions

[ Parent | on HN ]

Re:Supabase introduces MFA support by kitsunesoba on Wednesday December 14, 2022 @12:47PM (#33986972)

Dumb question from someone who hasn’t been keeping up with this particular subsphere of app dev…

What’s the ideal use case for Supabase? It seems oriented towards “serverless” apps given the mentions of edge functions, but does it fit in as a component of an app with a more traditional back end?

[ Parent | on HN ]

Re:Supabase introduces MFA support by kiwicopple on Wednesday December 14, 2022 @01:11PM (#33987337)

Supabase is just Postgres. You can connect to the Postgres database using all the tools you're familiar with. Every project runs on an isolated ec2 instance (including free-tier)

We provide additional tools that make it easy to use/connect to the database (PostgREST, pgbouncer, etc), but these are completely optional

[ Parent | on HN ]

Re:Supabase introduces MFA support by kitsunesoba on Wednesday December 14, 2022 @01:22PM (#33987518)

Thanks, appreciate the answer!

[ Parent | on HN ]

Re:Supabase introduces MFA support by EMIRELADERO on Wednesday December 14, 2022 @11:53AM (#33986249)

In the end of the post, you mention 2 libraries that helped you implement MFA. Upon further inspection they seem to be Go libraries. However from what I've seen Supabase is a TS/JS monorepo with no Go code.

Did you port the libraries to TypeScript? Or is the enteprise/managed cloud hosted infrastructure reliant on Go for internal things not available on the self hosted option?

[ Parent | on HN ]

Re:Supabase introduces MFA support by BuySomeDip on Wednesday December 14, 2022 @12:10PM (#33986484)

Hey I'm on the Supabase Auth team.

Supabase Auth uses GoTrue, which is a Go server. It's all open-source, so you can self host it as much as you want.

[ Parent | on HN ]

Re:Supabase introduces MFA support by kiwicopple on Wednesday December 14, 2022 @12:21PM (#33986651)

For more context, here is the the GoTrue repo: https://github.com/supabase/gotrue

You can see how it fits into the full Supabase Architecture here: https://supabase.com/docs/guides/getting-started/architectur...

[ Parent | on HN ]

Re:Supabase introduces MFA support by EMIRELADERO on Wednesday December 14, 2022 @01:18PM (#33987450)

Thanks for the info!

[ Parent | on HN ]

Re:Supabase introduces MFA support by sebnun on Wednesday December 14, 2022 @11:11AM (#33985564)

Great to see this. Unrelated but, is there any plan to add website hosting to Supabase?

[ Parent | on HN ]

Re:Supabase introduces MFA support by kiwicopple on Wednesday December 14, 2022 @11:20AM (#33985713)

it's a good question - one we get often. despite our "firebase alternative" positioning, this isn't something that we plan to tackle, at least for the foreseeable future.

There are already great platforms out there (e.g. Netlify and Vercel), whereas there are still a lot of unsolved problems in the database/postgres space. We're focusing on database problems first-and-foremost and the backlog hasn't shrunk enough to even think about website hosting.

[ Parent | on HN ]

Re:Supabase introduces MFA support by fakedang on Wednesday December 14, 2022 @12:20PM (#33986634)

Likewise, is there a possibility of Supabase enabling push notifications or automated emails for its users? I have switched to Supabase for most of my newer projects, but honestly push notifications are the last thing tying me to firebase products. Perhaps it would be possible to add some Sendgrid integration within the dashboard, as you have done for Twilio Auth?

[ Parent | on HN ]

Re:Supabase introduces MFA support by kiwicopple on Wednesday December 14, 2022 @12:27PM (#33986732)

yes, we're working with an integration partner for Push Notifications. check back on Friday :)

I believe the unfortunate situation with Push Notifications for Android is that you still need to sign up for Firebase project (because you need a Google/Firebase Server API Key).

[ Parent | on HN ]

Re:Supabase introduces MFA support by iamwillshepherd on Wednesday December 14, 2022 @01:58PM (#33988247)

You surely can use Supabase to send push notifications and automated emails by integrating with OneSignal. Check out this example of a Supabase Edge Function being used conditionally send and email/push based on user preference.

Link to code example https://github.com/OneSignalDevelopers/onesignal-supabase-sa...

[ Parent | on HN ]

Re:Supabase introduces MFA support by notlukesky on Wednesday December 14, 2022 @11:07AM (#33985509)

When is SAML support coming?

[ Parent | on HN ]

Re:Supabase introduces MFA support by kiwicopple on Wednesday December 14, 2022 @11:13AM (#33985600)

i expect it will be ready by Q1 next year (maybe only in "early access"). we mention this in the blog post - we're dog-fooding it right now, before releasing for developers

If you need it sooner feel free to reach out, my contact details are in my profile.

[ Parent | on HN ]

Re:Supabase introduces MFA support by fortuealex on Wednesday December 14, 2022 @03:49PM (#33990326)

Not to be a debbie downer but I'm trying to integrate Supabase Auth right now and the redirectTo parameter is broken on the resetPasswordForEmail api call.

[ Parent | on HN ]

Re:Supabase introduces MFA support by awalias on Wednesday December 14, 2022 @04:16PM (#33990702)

Broken how? Feel free to open an issue on http://GitHub.com/supabase/gotrue/issues

[ Parent | on HN ]