AuthZ with supertokens
joshung opened this issue · 6 comments
Hi jonra1993
You are amazing when write this repo. I love it.
If posible, please change authz from oso to supertokens because I think supertokens will more interesting.
Thanks to you
Hello, @joshung Thanks for your interest in this sample project you need to know that I was doing some experimentation in another project with supertokens (Because it is open source and has a lot of really interesting features) in order to create social logins easier. It uses authentication with cookies instead of jwt which imply a really big change but also working with cookies did things more complicated on Fastapi especially since it was required to do a significant change on Swagger to make the auth work on docs. Its performance was not as good as expected so in that project, we decided to migrate to Cognito. based on such previous experience I do not think migration to supertoken is a good idea for now.
Thanks to you for really clear explain. Continues flow your repo.
Just curious, how would you compare cognito to internal authn + oso?
Hello, @bazylhorsey cognito is a good tool for authN and it lacks AuthZ inbuild and oso could fit great for authZ. I think both can work together perfectly. In my opinion, AuthZ is more complicated and Oso in their documentation shows different levels of Authz, and you can the best that fits your project.
will this project include cognito at one point?
Hello @bazylhorsey I think It will not be in order to keep it the simpler possible and independent of a cloud provider. But maybe later, I can create another simpler sample using cognito auth.