September 2024 Summaries

PropelAuth provides a comprehensive suite of customization options for controlling user access to digital products, ranging from disabling public signups to implementing domain-specific restrictions. The platform allows for granular management of user access through features such as allowlists and blocklists, which can be tailored to accommodate internal applications or manage unwanted signups from burner domains. For business-to-business products, PropelAuth offers functionalities to prevent personal email signups, ensuring better tracking of company engagements. Additionally, the platform supports invitation-based user expansion and provides advanced access management through Enterprise SSO/SAML, enabling organizations to control application access via centralized systems like Okta or Microsoft Entra ID. Through its flexible settings, PropelAuth enables product owners to tailor user access in a way that aligns with their specific needs and preferences.

FastAPI is a modern web framework in Python that excels in building APIs with features like built-in support for OpenAPI specs and dependency injection, which is particularly useful for managing authentication and authorization. Dependency injection in FastAPI allows for clean and reusable code, making it easier to implement token validation, user permissions, and multi-tenancy, without the verbosity and potential errors of direct parameter handling. While middleware is commonly used for authentication checks in other frameworks, FastAPI's dependency injection offers a more flexible and integrated approach, allowing user data to be directly injected into route functions. This makes complex authorization scenarios, such as multi-tenancy and role-based access control, more straightforward by using nested dependencies. PropelAuth complements FastAPI by providing a library that simplifies the setup of advanced authentication and authorization capabilities, including features like SSO and SCIM Provisioning, leveraging FastAPI's dependency injection system.

The author discusses their experience and preferences in choosing database libraries for writing example applications at PropelAuth, emphasizing the importance of minimizing the abstraction between code and SQL to maintain clarity and safety. They express a preference for libraries like SQLx, PgTyped, and JDBI, which allow direct SQL writing while providing safety features such as compile-time checking and type interfaces. Additionally, the author mentions alternatives like query builders jOOQ and Drizzle, which maintain a small gap between code and SQL. They also note the trade-offs of using raw SQL, such as reduced portability and increased verbosity, suggesting that the choice of database library should consider the complexity of queries needed and the potential benefits of using ORMs for simpler CRUD operations.

The @propelauth/remix library has been released to simplify the integration of authentication, authorization, and multi-tenancy in Remix applications. Remix is highlighted as a versatile full-stack JavaScript framework, particularly favored for projects like user-facing dashboards due to its clean abstractions and features such as nested routes, parallel data loading, and progressive enhancement. The framework's ability to manage server-side operations through loaders and actions, combined with the type-safe useLoaderData hook, underscores its effectiveness. The @propelauth/remix library enhances Remix's capabilities by providing easy authentication and authorization checks and supports B2B multi-tenant use cases through user role and permission management. For more details, users are encouraged to explore the documentation or Remix's tutorial.