User Sessions and Auth
# general-help
m
How do people normally handle user sessions and auth? Use a third party auth provider and store sessions in JWT's? Would it be awful to implement my own password auth and store sessions in a cookie encrypted GUID and D1? FYI I'm using Node.
a
You might want to check AuthJS they have D1 adapter. https://authjs.dev/ Otherwise Supabase has 50k MAU for free, they use open sourced GoTrue https://github.com/supabase/gotrue
But I looked at auth js security tab on GitHub it seems there was a lot of attack vectors. So I just went with Firebase Auth.
m
Seems like everyone just goes with firebase auth, which is implies it isn't a bad idea for myself. Guess I'll do that also.
a
Yea ! if you don't upgrade to identity platform you have unlimited MAU for free. If you upgrade then it's 50k MAU included but then they charge per MAU
you will have to check GDPR and stuff if you want to operate in EU though, keep that in mind
m
That's good to know, thank you. Now I just need to find a good way of merging AAC's on cloudbase and I might have a solution for most of my technical issues. No FFMPEG on workers though.
a
Have you seen cloudflare streams? they also have webrtc in beta afaik
m
No but I’ll have to check them out. Thanks.