3
customize session time box by each flow (short lived session for B2B2C apps)
Source: supabase/supabase#34619 · opened by @softmarshmallow
Hi. Let's say we have a B2B2C app like Stripe.
the workspace (saas) user and customer user shares the same supabase auth.user for rls and following best practices.
Let's also say that we have a "Customer Portal" page like Stripe, that this requires verification of email, but that specific session is valid for 30 min. (for security or whatever reasons)
Currently the session time-box configuration is global, but seems technically possible to add extra args to set this by-auth by-flow individually.
Thoughts and anyone needs this for your apps ?
the workspace (saas) user and customer user shares the same supabase auth.user for rls and following best practices.
Let's also say that we have a "Customer Portal" page like Stripe, that this requires verification of email, but that specific session is valid for 30 min. (for security or whatever reasons)
Currently the session time-box configuration is global, but seems technically possible to add extra args to set this by-auth by-flow individually.
Thoughts and anyone needs this for your apps ?
No pledges yet. Be the first to back this.
Comments
Similar requests
Add autoRefresh Option to getUser() to Ensure Session Data is Synced with Latest User State
3 votes · 0 comments
Device Authorization Flow
3 votes · 0 comments
Persist session
1 vote · 0 comments
Add automatic session code detection from a specfifc path in the URL in supabase-js
1 vote · 0 comments
Set JWT Expiry maximum to longer than one week
1 vote · 0 comments
No comments yet.