<story><title>Supabase Auth: SSO, Mobile, and Server-Side Support</title><url>https://supabase.com/blog/supabase-auth-sso-pkce</url></story><parent_chain></parent_chain><comment><author>oakesm9</author><text>&amp;gt; Building apps for iOS requires support for native Sign in with Apple&lt;p&gt;This part isn&amp;#x27;t 100% true. It is only a requirement if you have some other form of social login (such as &amp;quot;Login with Facebook&amp;quot;) and your app isn&amp;#x27;t specifically made for using data from that platform (such as a Facebook page managemenet app) [0].&lt;p&gt;You don&amp;#x27;t need Sign in with Apple if you only use your own account system.&lt;p&gt;[0]&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;developer.apple.com&amp;#x2F;app-store&amp;#x2F;review&amp;#x2F;guidelines&amp;#x2F;#sign-in-with-apple&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;developer.apple.com&amp;#x2F;app-store&amp;#x2F;review&amp;#x2F;guidelines&amp;#x2F;#sig...&lt;/a&gt;</text></comment>
<story><title>Supabase Auth: SSO, Mobile, and Server-Side Support</title><url>https://supabase.com/blog/supabase-auth-sso-pkce</url></story><parent_chain></parent_chain><comment><author>andymitchell</author><text>I can&amp;#x27;t advocate Supabase enough. Their combo of openness and elegance in their platform leaves me (a developer&amp;#x2F;entrepreneur) feeling secure.&lt;p&gt;This is perhaps a future topic, but to me it extends out of SSO:&lt;p&gt;Paul (@kiwicopple), do you have an opinion on which enterprise-grade AuthZ provider works best with Supabase?&lt;p&gt;I suspect it&amp;#x27;s Cerbos or Casbin, but if you ever do it in house (and since you&amp;#x27;ve nailed AuthN that makes great sense), my wishlist:&lt;p&gt;- It should be as simple as an API end point, .approve(auth.jwt(), Array&amp;lt;Role | Permission&amp;gt;). I.e. be available in Edge Functions, Postgres Functions, and anywhere else.&lt;p&gt;- Use a policy schema with the most industry support for easier acceptance&amp;#x2F;integration with the enterprise.&lt;p&gt;- Flesh out with enterprise-ready policy auditing tools, logging, etc. This is the real time saving for developers.&lt;p&gt;- I really recommend Tailscale&amp;#x27;s ideas for better RBAC in &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;tailscale.com&amp;#x2F;blog&amp;#x2F;rbac-like-it-was-meant-to-be&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;tailscale.com&amp;#x2F;blog&amp;#x2F;rbac-like-it-was-meant-to-be&amp;#x2F;&lt;/a&gt;</text></comment>