UI management system

Question

Hello Do SuperTokens have a Dashboard UI only in SaaS paid version Self hosted does not have any UI management system

rp · Answer

hey < bodich> both versions have user management UI https supertokens com docs userdashboard about

bodich · Answer

Thanks I ll check It s right inside the main service or additional service has to be deployed

rp · Answer

it s served by the backend SDK

rp · Answer

So whichever serivce you have added our backend SDK do that will also serve the dashboard

bodich · Answer

Do you have the same but for Java + Spring Unfortunately I can find only Nodejs Go Python Does it possible to use with Java import SuperTokens from supertokens node import Dashboard from supertokens node recipe dashboard

rp · Answer

we don t have a Java SDK

rp · Answer

but you can spin up a node process and use our node sdk with that This process would be the auth server to your app

bodich · Answer

But will it work by this scheme still Honestly I can t imagine the architecture for now https cdn discordapp com attachments 1096798450118565928 1096839762767257760 self hosted generic 1 png

rp · Answer

it will The Your backend API will be the node app with our node SDK

rp · Answer

and your java backend will be the application backend

rp · Answer

you can reverse proxy the request for auth to the node app

rp · Answer

and the rest of the requests to your backend can hit the java backend

bodich · Answer

Supertokens core will know anyway if requests to api are authorised right

rp · Answer

what do you mean

bodich · Answer

I mean node app will have Supertokens middleware right

rp · Answer

yes

bodich · Answer

And requests to auth will go through the Supertokens middleware

rp · Answer

yes

bodich · Answer

But then once I authenticated and send request to api I will not have that middleware on my Java Spring app

rp · Answer

yea But then you will have a JWT which you can verify on the java side using any jwt verification lib in java

bodich · Answer

And I will request verification from the node app which has the Supertokens middleware right

rp · Answer

no

rp · Answer

the request should contain a JWT

rp · Answer

and then you can verify the JWT in java itself using a jwt verification lib

rp · Answer

See this https supertokens com docs session common customizations sessions with jwt enabling jwts

bodich · Answer

Yeah I mean my Java app will receive JWT from let s say React app then Java will verify JWT from node server And if it s ok then do whatever it needs

rp · Answer

it won t verify from the node server

rp · Answer

i mean the jwks endpoint will be exposed from the node server yes

rp · Answer

but the verification happens in java itself

bodich · Answer

But how I can check if JWT session was terminated let s say I did logout Supertokens know if particular JWT is logged out already

rp · Answer

if you logout the jwt will be removed from the frontend

rp · Answer

i suggest you see our docs in more detail first

rp · Answer

cause all this is mentioned in our docs

rp · Answer

hope this helps have a good weekend

bodich · Answer

I mean if somehow JWT was stolen

rp · Answer

yea jwts are short lived

rp · Answer

so there is a risk yea but you can t really do anything about that The only thing is to make the JWT short lived which it already s

bodich · Answer

Yes I ve logged out on frontend but JWT was stolen then that hacker will still use it

rp · Answer

yes But they are short lived

bodich · Answer

No any logged out cases storage let s say on Redis

rp · Answer

huh