Viewing profile — xytofs

getClaims() uses a multi-level cache + WebCrypto API to verify JWTs signed with an asymmetric key locally. Cache is this: 1. Origin server is always Supabase Auth, which like all a…

[flagged]

You can just take the Auth server, run it yourself with an AWS RDS instance for example, keep up with updates and be good to go. Yes you get a good UI with Supabase, and even much …

> how are your security teams ok with exposing your PG server to the internet, relying mainly on RLS? And RLS isn't turned on by default, so full tables are exposed to the public i…

What were the troubles you faced?