Using supertokens for auth with API gateway

[pankiljoshi]

Hi,

I'm building an API server using sst/ion and I would like to use supertokens (https://supertokens.com/) for authentication, is there any documentation which I can refer to?

[jayair]

We don't currently have any docs on this.

[pankiljoshi]

Current Update:

I was able to setup supertokens with a container service, the sst definition looks like this:

export const authService = cluster.addService("myService", {
    public: {
        ports: [{ listen: "443/https", forward: "3567/http" }],
        ...authDomain()
    },
    dev: {
        command: `docker run -p 3568:3567 -e POSTGRESQL_CONNECTION_URI="${process.env.DATABASE_URL}" -e POSTGRESQL_TABLE_NAMES_PREFIX="${process.env.SUPERTOKENS_POSTGRESQL_TABLE_NAMES_PREFIX}" -d registry.supertokens.io/supertokens/supertokens-postgresql`,
        url: "http://localhost:3567"
    },
    environment: {
        POSTGRESQL_CONNECTION_URI: process.env.DATABASE_URL,
        POSTGRESQL_TABLE_NAMES_PREFIX: process.env.SUPERTOKENS_POSTGRESQL_TABLE_NAMES_PREFIX
    },
    image: {
        dockerfile: "Dockerfile.auth",
        cpu: "1 vCPU",
        memory: "2 GB"
    }
});

And I did setup a greedy route for supertokens auth URL:

api.route("POST /auth/{proxy+}", {
    handler: "packages/functions/src/api/auth.handler",
});

The next step is to setup an authorizer to verify sessions, I'm trying to add a lambda authorizer for it like this:

const supertokensAuthorizer = api.addAuthorizer({
    name: "supertokensAuthorizer",
    lambda: {
      function: "packages/functions/src/api/auth.authorizer",
    }
  });

and this for protecting a route with the same authorizer:

api.route("POST /users", {
    handler: "packages/functions/src/api/createUser.handler",
    auth: {
        lambda: supertokensAuthorizer.id
    }
});

When I call the POST method /users, it's bypassing the auth and not triggering the supertokensAuthorizer handler (packages/functions/src/api/auth.handler"), I'm definitely doing something wrong here with the authorizer, any guidance would be appreciated.

I might write a tutorial once I figure it all out.

[thdxr]

wow this is great