Giters

jonra1993 / fastapi-alembic-sqlmodel-async

This is a project template which uses FastAPI, Pydantic 2.0, Alembic and async SQLModel as ORM. It shows a complete async CRUD using authentication and role base access control.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

AuthZ with supertokens

joshung opened this issue · comments

commented

Hi jonra1993
You are amazing when write this repo. I love it.
If posible, please change authz from oso to supertokens because I think supertokens will more interesting.
Thanks to you

commented

Hello, @joshung Thanks for your interest in this sample project you need to know that I was doing some experimentation in another project with supertokens (Because it is open source and has a lot of really interesting features) in order to create social logins easier. It uses authentication with cookies instead of jwt which imply a really big change but also working with cookies did things more complicated on Fastapi especially since it was required to do a significant change on Swagger to make the auth work on docs. Its performance was not as good as expected so in that project, we decided to migrate to Cognito. based on such previous experience I do not think migration to supertoken is a good idea for now.

commented

Thanks to you for really clear explain. Continues flow your repo.

commented

Just curious, how would you compare cognito to internal authn + oso?

commented

Hello, @bazylhorsey cognito is a good tool for authN and it lacks AuthZ inbuild and oso could fit great for authZ. I think both can work together perfectly. In my opinion, AuthZ is more complicated and Oso in their documentation shows different levels of Authz, and you can the best that fits your project.

commented

will this project include cognito at one point?

commented

Hello @bazylhorsey I think It will not be in order to keep it the simpler possible and independent of a cloud provider. But maybe later, I can create another simpler sample using cognito auth.