You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hai @dbarrosop Thanks for considering this pattern based on discussion in discord. This gives much more flexibility to create custom sign up flows.
But this endpoints going to be public so I have a thought instead of having signature kind of implementation we can do rate limit to avoid attack. Which is similar to authentication endpoint available in nhost.
someting like:
/signup/webhook { userDetails...} -> { session... }
/signin/webhook { signinDetails... } -> { session... }
For security purposes that webhook would require some signature or similar to authenticate the caller rather than the user.
This would be useful for the users we have that want to implement their own custom signup/signin workflows.
The text was updated successfully, but these errors were encountered: