how would apple or google sign in work on react na...
# general
u
how would apple or google sign in work on react native app? Does it work "natively" or does it first open the browser and then redirect to back to app when you sign out like Amazon Cognito federated auth does? (which feels unintuitive and unnative on mobile apps)?
r
Hey. It works natively. See our docs for custom UI
u
Thanks, and how about passwordless otp login? Which email provider do you use under the hood, what is the pricing model for sending emails?
r
We use sendGrid and our email service is free at the moment.
u
"at the moment" ... do you plan to change it? what pricing model do you have in mind for hosted service? and is there an option to use other providers (amazon ses for example) for selfhosted?
r
The pricing model for email service isn’t determined yet. So it’s free for all users. You can override the emailDelivery config on the backend SDK init to use any service you like instead.
Have a look at our docs for email delivery
u
thats great, thanks, will take a look
another quick question: do i need to manually refresh tokens? or does the react native sdk do it automatically? like aws-amplify or firebase do
r
It does it automatically
It’s in our docs 🙂 have a look at it
u
If a user authenticates with Google/Apple, and then next time authenticates using passwordless email otp with the same email address, will he be treated as the same user? Or different one?
r
different one. But you can prevent them from signing in with passwordless in this case. See this: https://supertokens.com/docs/thirdpartypasswordless/common-customizations/deduplication/overview
u
yeah found out that account linking is not yet available? what is the ETA for it to become available? what does the pricing model look like? is it smth like extra cents on top of 0.02 per MAU? will it also have a free tier (under 5000 mau)?
r
The pricing for it is yet to be determined, but it’s going to be 1 cent per MAU with a $100 per month minimum. But of course, this can change a lot, so don’t take my word for it now
It’s ETA is august
u
$100 might be a lot for users with no traction... will it be possible to use it for free on selfhost since its opensource? or will that part be closed source?
like thats not a "nice to have" feature but rather "must have" in most cases...dunno just my opinion
r
it will be a closed source feature. You can always use the account deduplication feature instead from the link provided - for free.
u
okay if we start with deduplication until traction, and then decide to add linking feature... will everything work smoothly with the existing users and code?
r
It should. You may need to upgrade the sdk versions given that we don't have that feature yet, which may invlove following our migration guides, but that's about it.
u
please consider adding some free tier (maybe within the already existing free tier of 5K users). Except from that what if we will also need 2FA, does the 1cent you mentioned cover all paid features per MAU? - As for 1 cent per MAU, is it only for those users who used account linking? of for all existing users? - Does $100 cover 10K users? or is it just a min payment and then you pay 1 cent on top of it per user?
r
- 1 cent is for all MAU and it only covers the account lining feature
- this will cover 10k MAU
u
I see so if at some point i reach 100K MAU, and even only 500 of them use account linking feature I still have to pay 100K*0.01 =$1000? Even if I self host?
r
yup. But we are open to negotiation since that would be bulk users.
u
what kind of security measures do you have in place for email sending? is there a input validation, rate limit etc? for otp sending? 1) in case i use the default email settings 2) in case i use my own smtp server? to prevent ddos for example
also curious what will happen if at some point after having account linking we decide to downgrade... which method (google/apple/email) the users will be able to sign in with? provided they have previousy linked them all?
r
About rate limiting of email sending, we don’t have any at the moment. But you can add your own by overriding the sendEmail function in the emailDelivery config
When you say downgrade, I assume you mean stop using account linking correct? In that case, existing users will continue to function as is, but new account creations will not be account linked (same as today)
u
Yes, thats correct. Got you, thanks
hey @rp_st just curious what the pricing could look like in case we reach lets say 800K MAU, how much could that cost with self host but account linking feature?
trying to compare with firebase
r
@Adiboi can help with pricing here.
a
hey Wess - I tried DMing you but you're accepting DMs only from friends and I'm unable to send you a friend request. Would you mind DMing me your email ID or sending me a friend request?
u
done
5 Views