UI management system
# support-questionsb
bodich
04/15/2023, 2:05 PMHello. Do SuperTokens have a Dashboard UI only in SaaS paid version? Self hosted does not have any UI management system?
r
rp
04/15/2023, 2:06 PMhey @bodich both versions have user management UI: https://supertokens.com/docs/userdashboard/about
b
bodich
04/15/2023, 2:07 PMThanks, I'll check. It's right inside the main service, or additional service has to be deployed?
r
rp
04/15/2023, 2:08 PMit's served by the backend SDK.
rp
04/15/2023, 2:08 PMSo whichever serivce you have added our backend SDK do, that will also serve the dashboard
b
bodich
04/15/2023, 4:38 PMDo you have the same, but for Java + Spring?
Unfortunately I can find only Nodejs, Go, Python.
Does it possible to use with Java?
import SuperTokens from "supertokens-node";
import Dashboard from "supertokens-node/recipe/dashboard";
r
rp
04/15/2023, 4:45 PMwe don't have a Java SDK
rp
04/15/2023, 4:45 PMbut you can spin up a node process and use our node sdk with that. This process would be the auth server to your app
b
bodich
04/15/2023, 4:49 PMBut will it work by this scheme still? Honestly I can't imagine the architecture for now...
https://cdn.discordapp.com/attachments/1096798450118565928/1096839762767257760/self_hosted_generic-1.png▾
r
rp
04/15/2023, 4:50 PMit will. The "Your backend API" will be the node app with our node SDK
rp
04/15/2023, 4:50 PMand your java backend will be the application backend
rp
04/15/2023, 4:50 PMyou can reverse proxy the request for /auth/* to the node app
rp
04/15/2023, 4:50 PMand the rest of the requests to your backend can hit the java backend
b
bodich
04/15/2023, 4:53 PMSupertokens core will know anyway if requests to /api/ are authorised, right?
r
rp
04/15/2023, 4:54 PMwhat do you mean?
b
bodich
04/15/2023, 4:54 PMI mean node app will have Supertokens middleware, right?
r
rp
04/15/2023, 4:54 PMyes
b
bodich
04/15/2023, 4:54 PMAnd requests to /auth will go through the Supertokens middleware
r
rp
04/15/2023, 4:55 PMyes
b
bodich
04/15/2023, 4:55 PMBut then once I authenticated and send request to /api, I will not have that middleware on my Java Spring app
r
rp
04/15/2023, 4:55 PMyea. But then you will have a JWT which you can verify on the java side using any jwt verification lib in java
b
bodich
04/15/2023, 4:56 PMAnd I will request verification from the node app which has the Supertokens middleware, right?
r
rp
04/15/2023, 4:56 PMno
rp
04/15/2023, 4:56 PMthe request should contain a JWT
rp
04/15/2023, 4:57 PMand then you can verify the JWT in java itself using a jwt verification lib
rp
04/15/2023, 4:57 PMb
bodich
04/15/2023, 4:57 PMYeah, I mean my Java app will receive JWT from let's say React app, then Java will verify JWT from node server. And if it's ok then do whatever it needs
r
rp
04/15/2023, 4:58 PMit won't verify from the node server
rp
04/15/2023, 4:58 PMi mean the jwks endpoint will be exposed from the node server yes.
rp
04/15/2023, 4:58 PMbut the verification happens in java itself
b
bodich
04/15/2023, 5:00 PMBut how I can check if JWT session was terminated, let's say I did logout. Supertokens know if particular JWT is logged out already?
r
rp
04/15/2023, 5:00 PMif you logout, the jwt will be removed from the frontend
rp
04/15/2023, 5:00 PMi suggest you see our docs in more detail first 🙂
rp
04/15/2023, 5:00 PMcause all this is mentioned in our docs
rp
04/15/2023, 5:01 PMhope this helps 🙂 have a good weekend
b
bodich
04/15/2023, 5:01 PMI mean if somehow JWT was stolen
r
rp
04/15/2023, 5:01 PMyea.. jwts are short lived
rp
04/15/2023, 5:01 PMso there is a risk yea, but you can't really do anything about that. The only thing is to make the JWT short lived, which it already s
b
bodich
04/15/2023, 5:01 PMYes, I've logged out on frontend, but JWT was stolen, then that hacker will still use it?
r
rp
04/15/2023, 5:01 PMyes. But they are short lived.
b
bodich
04/15/2023, 5:03 PMNo any logged-out cases storage let's say on Redis?
r
rp
04/15/2023, 5:03 PMhuh?