Bartek Kus bartekus

Implement user API keys with Supabase

This is pretty much my first crack at this. I'm sure things could be improved or done differently.

Rationale

JWTs are at the heart of Supabase authorization, but sometimes we wanna build an app that also gives users access via API keys; or perhaps only exclusively via API keys. As you may know, using JWTs as API keys makes them difficult to revoke and therefore a security issue.

We also want to ensure this doesn't significantly add to RLS polices, if at all.

Finally, we'd love to have this handled by Supabase and do as little as possible in our framework. This simplifies our code and reduces third-party libraries.

Folks, Leave me a comment / URL if something you like is missing!

Beginner Resources

Resource	Description
Kube Academy	https://kube.academy/
kuernetes-101	https://kube.academy/courses/kubernetes-101/
Docs Home	https://kubernetes.io/docs/home/
CKS CKA CKAD Simulator	https://killer.sh/

Building pgmodeler for Mac

Check requirements at https://pgmodeler.io/installation.

You will need Qt 5.9.x installed, full XCode installed, and homebrew installation of postgres and openssl.

The example below is v10.5 of PG and v5.9.6 of Qt, modify accordingly. Also, replace {{USERNAME}} with you Mac username.

The installation is the same as the instructions at the link above. There are a few path differences due to homebrew installation locations.

Building pgModeler in MacOS with Homebrew

The official installation instructions for pgModeler recommends installing Xcode and the Enterprise DB distribution of Postgres to fulfill its build requirements. Luckily, Homebrew's got us covered!

Checkout the source

git clone https://github.com/pgmodeler/pgmodeler.git

	# *** BEGIN GPL LICENSE BLOCK ***
	#
	#
	# This program is free software; you can redistribute it and/or
	# modify it under the terms of the GNU General Public License
	# as published by the Free Software Foundation; either version 2
	# of the License, or (at your option) any later version.
	#
	# This program is distributed in the hope that it will be useful,
	# but WITHOUT ANY WARRANTY; without even the implied warranty of

	FROM sitespeedio/node:ubuntu-22.04-nodejs-18.12.1 AS pruner
	RUN apt-get update && apt-get install -y openssl
	WORKDIR /app
	RUN npm install turbo -g
	COPY . .
	RUN turbo prune --scope=webapp --docker
	RUN find . -name "node_modules" -type d -prune -exec rm -rf '{}' +

	# Base strategy to have layer caching
	FROM sitespeedio/node:ubuntu-22.04-nodejs-18.12.1 AS base

	-- Token Based API Access for Supabase
	--
	-- How to configure Supabase (https://supabase.com/) to generate and accept API tokens.
	--
	-- (c) 2022 Felix Zedén Yverås
	-- Provided under the MIT license (https://spdx.org/licenses/MIT.html)
	--
	-- Disclaimer: This file is formatted using pg_format. I'm not happy with the result but
	-- prefer to follow a tool over going by personal taste.
	--

	-- Based off IETF draft, https://datatracker.ietf.org/doc/draft-peabody-dispatch-new-uuid-format/

	create or replace function uuid_generate_v7()
	returns uuid
	as $$
	begin
	-- use random v4 uuid as starting point (which has the same variant we need)
	-- then overlay timestamp
	-- then set version 7 by flipping the 2 and 1 bit in the version 4 string
	return encode(

	version: '3'

	services:

	traefik:
	container_name: traefik
	image: traefik:v2.0
	command:
	- "--api.insecure=true"
	- "--providers.docker=true"

	version: '3'
	services:
	traefik:
	restart: unless-stopped
	image: traefik:v2.0.2
	ports:
	- "80:80"
	- "443:443"
	labels:
	- "traefik.http.services.traefik.loadbalancer.server.port=8080"