Supabase Auth: SSO, Mobile, and Server-Side Support

Re:Supabase Auth: SSO, Mobile, and Server-Side Support by jzelinskie on Thursday April 13, 2023 @11:31AM (#35556989)

If you need the flexibility of a system that can model both RBAC and ABAC and you also want you want a Zanzibar-inspired design, SpiceDB[0] is the only option that I know checks all the boxes (disclosure: I'm a maintainer).

The UX definitely isn't optimized for Supabase, but I'd love to learn more about how that could be improved. I suspect it might be complicated if Supabase assumes RLS for everything.

[0]: https://github.com/authzed/spicedb

[ Parent | on HN ]

Re:Supabase Auth: SSO, Mobile, and Server-Side Support by victor106 on Thursday April 13, 2023 @12:02PM (#35557527)

While SpiceDB looks good. My only concern is if they will go the mongo route once they get more adoption and need to satisfy investors as opposed to customers/developers and make most of their features paid and leave the open source version hanging.

[ Parent | on HN ]

Re:Supabase Auth: SSO, Mobile, and Server-Side Support by jzelinskie on Thursday April 13, 2023 @12:16PM (#35557799)

Well, you're in luck because AuthZed, the business behind SpiceDB, is quite conservative and the founding team has a strong history properly balancing open source businesses from their experience at CoreOS and Red Hat.

Glad to chat with anyone privately if they want more details.

[ Parent | on HN ]