What is the optimal deployment strategy for implementing a passwordless recipe with Lambda, consider...

vaz007.

06/29/2023, 12:21 PM

What is the optimal deployment strategy for implementing a passwordless recipe with Lambda, considering the login needs of N users? Should we choose Lambda as the best option, or would an ECS and API Gateway structure be more suitable? Alternatively, are there any other strategies that offer better deployment options on AWS ?

rp_st

06/29/2023, 2:17 PM

hey @vaz007. this is a personal choice really, but i don't like lambdas very much cause of the cold start problem.

vaz007.

07/04/2023, 6:34 AM

exactly I was thinking of ECS and then I can forward the request to my authorization container, which then can forward request to an ELB

vaz007.

07/04/2023, 6:38 AM

Can you tell me whats wrong with the following codebase recipeList: [ Passwordless.init({ smsDelivery: { override: (originalImplementation) => { return { ...originalImplementation, sendSms: async function ({ //codeLifetime, // amount of time the code is alive for (in MS) phoneNumber, //urlWithLinkCode, // magic link userInputCode, // OTP }) { // TODO: create and send SMS sdk.auth("APIKEY"); // const template =

Hello this is your OTP ${userInputCode} and link ${urlWithLinkCode}

console.log(phoneNumber); sdk.sendSms({ // template_id: 'EntertemplateID', mobiles: phoneNumber, }) .then((data:any ) => console.log(data)) .catch((err:any) => console.log(err)); } }; } }, contactMethod: "PHONE", flowType: "USER_INPUT_CODE" }), Session.init(), Dashboard.init(), ],

vaz007.

07/04/2023, 6:39 AM

it says sendSms is not a valid operator for this API

vaz007.

07/04/2023, 6:39 AM

operation on this API

rp_st

07/04/2023, 6:39 AM

can i see the error stack?

vaz007.

07/04/2023, 6:40 AM

just a sec

vaz007.

07/04/2023, 6:40 AM

Error: Sorry,

sendSms

does not appear to be a valid operation on this API. at Proxy. (/Users/fllap0588_ankurvazirani/Desktop/auth/passwordless/my-app/backend/node_modules/api/dist/index.js:180:47) at step (/Users/fllap0588_ankurvazirani/Desktop/auth/passwordless/my-app/backend/node_modules/api/dist/index.js:33:23) at Object.next (/Users/fllap0588_ankurvazirani/Desktop/auth/passwordless/my-app/backend/node_modules/api/dist/index.js:14:53) at fulfilled (/Users/fllap0588_ankurvazirani/Desktop/auth/passwordless/my-app/backend/node_modules/api/dist/index.js:5:58) at processTicksAndRejections (node:internal/process/task_queues:95:5)

vaz007.

07/04/2023, 6:41 AM

import Passwordless from "supertokens-node/recipe/passwordless"; import Session from "supertokens-node/recipe/session"; import { TypeInput } from "supertokens-node/types"; import Dashboard from "supertokens-node/recipe/dashboard"; const sdk = require("api")("@msg91api/v5.0#6n91xmlhu4pcnz");

vaz007.

07/04/2023, 6:41 AM

these were my import statements

rp_st

07/04/2023, 6:42 AM

i don't think this is from our SDK.

vaz007.

07/04/2023, 6:43 AM

yeah missed it

vaz007.

07/04/2023, 6:44 AM

sorry its from msg91

vaz007.

07/08/2023, 4:43 AM

Hey I am having a frontend post signup issue. Can you help me out ? I am unable to call the onHandleEvent function recipeList: [ Passwordless.init({ contactMethod: "EMAIL_OR_PHONE", onHandleEvent: async (context: any) => { console.log(context); // let {id, email, phoneNumber} = context.user; console.log(context.user); if (context.action === "SUCCESS") { if (context.action === "SESSION_ALREADY_EXISTS") { // TODO: console.log('SESSION ', context.action); } else if (context.action === "PASSWORDLESS_RESTART_FLOW") { // TODO: console.log(context.action); } else if (context.action === "PASSWORDLESS_CODE_SENT") { // TODO: console.log(context.action); } else { if (context.isNewUser) { // TODO: Sign up console.log(context.action); console.log(context.isNewUser); // await UserMetadata.updateUserMetadata('1', { role: "user" }); } else { // TODO: Sign in console.log('SIGN IN '); console.log(context.action); } } } }, }), Session.init(), ]

rp_st

07/08/2023, 4:43 AM

are you using custom UI or our pre built UI?

vaz007.

07/10/2023, 3:23 AM

prebuilt

rp_st

07/10/2023, 5:25 AM

does the

console.log(context);

get logged out?

vaz007.

07/10/2023, 11:23 AM

nope

rp_st

07/10/2023, 11:59 AM

which login method are you using to sign up?

vaz007.

07/10/2023, 12:28 PM

passwordless

rp_st

07/10/2023, 12:29 PM

are you manually calling the consumeCode function from our frontend sdk?

vaz007.

07/10/2023, 1:12 PM

nope

vaz007.

07/10/2023, 1:12 PM

I have just added onHandleEvent

rp_st

07/10/2023, 1:13 PM

hmm. This is odd. Im tagging @porcellus who can help out here.

rp_st

07/10/2023, 1:13 PM

he may be able to help in the coming 2-3 days

vaz007.

07/10/2023, 1:13 PM

Can't we just add metada on postSignup on backendSDK

rp_st

07/10/2023, 1:13 PM

you can. Yea

vaz007.

07/10/2023, 1:13 PM

metadata *

rp_st

07/10/2023, 1:13 PM

it's there in our docs

rp_st

07/10/2023, 1:13 PM

overriding the consumeCode API

vaz007.

07/10/2023, 1:13 PM

can you point me to it

rp_st

07/10/2023, 1:14 PM

https://supertokens.com/docs/passwordless/common-customizations/handling-signinup-success -> scroll to the second section

vaz007.

07/10/2023, 1:15 PM

Thanks let me give it a try

vaz007.

07/10/2023, 1:16 PM

hmm just a question is supertokens planning to add authorization layer as well ?

rp_st

07/10/2023, 1:16 PM

we have RBAC already

vaz007.

07/10/2023, 1:17 PM

import UserRoles from "supertokens-node/recipe/userroles"; // creating the admin role and adding permissions to it. await UserRoles.createNewRoleOrAddPermissions("admin", ["read:all", "delete:all", "edit:all"]) // creating the regular-user role and adding permissions to it. await UserRoles.createNewRoleOrAddPermissions("regular-user", ["read:all", "delete:self", "edit:self"])

vaz007.

07/10/2023, 1:18 PM

how would you suggest to add API level RBAC in this

vaz007.

07/10/2023, 1:19 PM

Looking at CASBIN for an alternative solution

rp_st

07/10/2023, 1:21 PM

please see our docs for this 🙂

rp_st

07/10/2023, 1:21 PM

it's all in there.

porcellus

07/12/2023, 9:24 AM

hi. This seems to be working as expected to me. If you need help with this could you add any other details that could help me reproduce this?

vaz007.

08/24/2023, 6:26 AM

Hey I need some help with supertokens. I have installed it locally on my MAC and when I hit localhost:3567/hello it works perfectly but when I hit it with my backend then it throws an error saying supertokens-core not found export function getApiDomain() { const apiPort = process.env.REACT_APP_API_PORT || 4001; const apiUrl = process.env.REACT_APP_API_URL || `http://localhost:${apiPort}`; return apiUrl; } export function getWebsiteDomain() { const websitePort = process.env.REACT_APP_WEBSITE_PORT || 3000; const websiteUrl = process.env.REACT_APP_WEBSITE_URL || `http://localhost:${websitePort}`; return websiteUrl; } export const SuperTokensConfig: TypeInput = { supertokens: { connectionURI: "http://localhost:3567", apiKey: "someKey", }, appInfo: { appName: "Auth Middleware Express", apiDomain: getApiDomain(), // ELB address websiteDomain: getWebsiteDomain(), // Frontend ADDRESS IS MANDATORY DURING PROD }, recipeList: [ Passwordless.init({ contactMethod: "PHONE", flowType: "USER_INPUT_CODE" }), Session.init({ // cookieSecure: true, // over https since we are on local we can't switch this to true }), Dashboard.init(), UserMetadata.init(), ],

vaz007.

08/24/2023, 6:29 AM

and I am using prebuilt UI

rp_st

08/24/2023, 6:46 AM

are you using docker?

vaz007.

08/24/2023, 6:47 AM

hmm no I was using the core

rp_st

08/24/2023, 6:48 AM

for the node process, are you using docker?

vaz007.

08/24/2023, 6:48 AM

rp_st

08/24/2023, 6:48 AM

then it's probably an issue with the firewall on your machine

vaz007.

08/28/2023, 7:18 AM

Hey I have deployed my frontend on S3 and backend on ECS, but for some reason I am facing CORS issue can you help me resolve the following issue CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

vaz007.

08/28/2023, 7:22 AM

should I disable app.use( cors({ origin: getWebsiteDomain(), allowedHeaders: ["content-type", ...supertokens.getAllCORSHeaders()], methods: ["GET", "PUT", "POST", "DELETE"], credentials: true, }) ); part from the backend

rp_st

08/28/2023, 7:50 AM

which API are you calling?

vaz007.

08/28/2023, 7:52 AM

/auth/signup/code

vaz007.

08/28/2023, 7:52 AM

using supertokens 6.0

rp_st

08/28/2023, 7:56 AM

have you added the cors middleware before or after the supertokens middleware?

vaz007.

08/28/2023, 7:57 AM

nope

vaz007.

08/28/2023, 7:58 AM

nothing

vaz007.

08/28/2023, 7:58 AM

do you want me to share my backend file

rp_st

08/28/2023, 7:58 AM

not really

rp_st

08/28/2023, 7:58 AM

you just have to add the cors middleware befroe the supertokens middleware

rp_st

08/28/2023, 7:58 AM

see one of our example app;s

vaz007.

08/28/2023, 7:58 AM

I am using your example app

vaz007.

08/28/2023, 7:59 AM

both on frontend and backend

rp_st

08/28/2023, 7:59 AM

our example apps do work for surew

rp_st

08/28/2023, 7:59 AM

maybe you made some changes

rp_st

08/28/2023, 7:59 AM

anyway, i can't really help since you aren't ansering my question directly.

vaz007.

08/28/2023, 8:00 AM

import express from "express"; import supertokens from "supertokens-node"; import cors from "cors"; import { middleware, errorHandler } from "supertokens-node/framework/express"; import { getWebsiteDomain, SuperTokensConfig } from "./config"; import { authRouter } from "./routes/auth"; import {internalIPRouter} from './routes/internalIP'; import {authorisationUserRule} from './routes/authorisationUserRulesController'; const app = express(); // Initialize Supertokens with the provided configuration supertokens.init(SuperTokensConfig); // Set up Cross-Origin Resource Sharing (CORS) middleware console.log('WEB DOMAIN : ',getWebsiteDomain()); app.use( cors({ origin: getWebsiteDomain(), allowedHeaders: ["content-type", ...supertokens.getAllCORSHeaders()], methods: ["GET", "PUT", "POST", "DELETE"], credentials: true, }) ); app.use(express.json()); // Supertokens middleware for handling sessions and related functionality app.use(middleware()); app.get('/', (req, res) => { res.status(200).send("HEALTH CHECK OK") }) app.use("/auth", authRouter); // app.use("/session", sessionRouter); // app.use("/getUserMetadata", userMetadataRouter); app.use("/internalIPAuth", internalIPRouter); app.use("/authorisationUserRule", authorisationUserRule); // Error handling middleware for Supertokens app.use(errorHandler()); app.listen(4001, () => console.log(

API Server listening on port 4001

));

vaz007.

08/28/2023, 8:00 AM

here is the file

rp_st

08/28/2023, 8:00 AM

Seems about fine

rp_st

08/28/2023, 8:00 AM

cors errors are out of scope of supertokens

rp_st

08/28/2023, 8:00 AM

please try to google them

vaz007.

08/28/2023, 8:00 AM

yeah I am just not sure whats going wrong

vaz007.

08/28/2023, 8:00 AM

thanks for your help

vaz007.

09/19/2023, 9:10 AM

Hey I have deployed my application. I just wanted to ask you can we deploy multiple frontends to contact with one backend ? Both frontend URLs will be different.

rp_st

09/19/2023, 11:55 AM

You can - can you descirbe the exact use case here?

vaz007.

09/19/2023, 1:27 PM

yeah so we are using multiple recipies on backend which includes Passwordless for one platform, and Email & Password for the other platform. So backend remains consistent. We need to specify our website domain in the backend and frontend according to the examples in the website

vaz007.

09/19/2023, 1:27 PM

so I was not sure on how to tackle this situation

rp_st

09/19/2023, 1:45 PM

are the frontend domains on different sub domains or entirely different domains? Also, will the backend apiDOmain value be same for both the websites?

rp_st

09/19/2023, 1:45 PM

it would be great if you can give the actual domains for the websites and the backend, so i can tell u exactly what you need to do

vaz007.

09/21/2023, 6:21 AM

Hey sorry for delayed response we are on same doamin and different subdomain. I just have one additional question, in supertokens version 14 I am able to generate email verification tokens but I am unable to generate a link. So how does the process work and I don't want to upgrade it to supertokens 15 since I would need to go and change all my existing APIs

rp_st

09/21/2023, 6:22 AM

u can form your own link from the token

rp_st

09/21/2023, 6:22 AM

just add the token as a query param to the link manually

rp_st

09/21/2023, 6:22 AM

see the existing link structure and pattern match

vaz007.

09/21/2023, 6:23 AM

ohh okay cool

vaz007.

09/21/2023, 6:25 AM

thanks

vaz007.

09/21/2023, 6:26 AM

was just little confused on creating link part. Thanks for all your help we are finally running passwordless recipie on dev env and planning to integrate thirdparty as well

4 Views

Previous Next

SuperTokens.com

SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).