I am implmenting auth for my workers based site. For implmenting a session store, should I use KV or

I am implmenting auth for my workers based site. For implmenting a session store, should I use KV or DOs? I read somewhere that as KVs are more akin to CDNs, they do not make good session store. Can someone enlighten me here

RRick I am implmenting auth for my workers based site. For implmenting a session store...

chientrm.com•7/2/23, 7:31 PM

D1 + jwt

RRick I am implmenting auth for my workers based site. For implmenting a session store...

Unsmart•7/2/23, 7:34 PM

Either would be fine, DOs would be cheaper

Unsmart•7/2/23, 7:36 PM

I personally prefer DOs for everything over KV, and for larger items I would still use R2 with cache before KV probably.

The biggest plus that KV has over DOs/R2 is the fact that KV is replicated to 2 storage nodes one in the US and one in the EU so cold reads can be faster on KV. But for a session store DOs will always be faster than KV since you can create an obejct per customer using DOs which means the object will be created close to the user.

RickOP•7/2/23, 7:39 PM

Thanks for weighing in.

RRick I am implmenting auth for my workers based site. For implmenting a session store...

JustinNoel•7/2/23, 8:11 PM

I personally use KV because it so easy to develop with. The KV request averages about 125 ms. That's fine for what I'm doing.

I'll move this to D1 when it goes into production.

dave•7/3/23, 2:54 AM

currently I'm finishing up D1 + jwt + Cache API

IvanStoikov•7/3/23, 3:11 AM

How to fix

Karew•7/3/23, 6:26 AM

One of the Cloudflare domains I manage says I assigned the nameservers correctly, but no records are being served yet (it has been more than 48+ hours). I am unsure what to check to find the issue.
Cloudflare also says "Registrar: Unknown"

KKarew One of the Cloudflare domains I manage says I assigned the nameservers correctly...

Hello, I’m Allie!•7/3/23, 6:33 AM

What’s the domain?

Karew•7/3/23, 6:33 AM

sydeber.nz

1.1.1.1APP•7/3/23, 6:34 AM

DNS over Discord: NS records

sydeber.nz NS @1.1.1.1 +noall +answer +shortsydeber.nz NS @1.1.1.1 +noall +answer +short

aspen.ns.cloudflare.com.
sterling.ns.cloudflare.com.

aspen.ns.cloudflare.com.
sterling.ns.cloudflare.com.

diggy diggy hole

•

7/7/23, 12:51 PM

1.1.1.1APP•7/3/23, 6:34 AM

DNS over Discord: WHOIS

The query does not appear to be a valid domain name, IP address or ASN, or no results could be found

KKarew sydeber.nz

Hello, I’m Allie!•7/3/23, 6:36 AM

The New Zealand Domain Name Comission shows that domain name to not be registered

Karew•7/3/23, 6:37 AM

I guess I will check on the registrar, thanks

Karew•7/3/23, 6:37 AM

Cloudflare says the nameservers are assigned though, which is super odd

KKarew Cloudflare says the nameservers are assigned though, which is super odd

Hello, I’m Allie!•7/3/23, 6:37 AM

Can you get a screenshot of where it says that?

HHello, I’m Allie!Can you get a screenshot of where it says that?

Karew•7/3/23, 6:40 AM

When I load the dashboard page for the domain, there is a brief flash that tells me congrats, Cloudflare is protecting the site. And then the statistics appear. The DNS management page is not complaining that the nameservers are not assigned

Karew•7/3/23, 6:41 AM

Isn't there usually like a red message or something if you look at the DNS manager and the namesevers aren't assigned

IIvanStoikov How to fix

IvanStoikov•7/3/23, 9:02 AM

@Walshy | Pages sorry tag

IvanStoikov•7/3/23, 9:02 AM

pls help me

Erisa•7/3/23, 9:12 AM

Please dont tag individual employees for help requests

Erisa•7/3/23, 9:13 AM

The website you showed is not using the Cloudflare proxy and has an invalid SSL certificate, you will need to fix that before it will work

Erisa•7/3/23, 10:37 AM

You're charged for all 51 users once you upgrade to a paid plan, so it would indeed jump to $357

WWalshy yes

GuillaumeLakano•7/3/23, 11:28 AM

So, Snippets can access the Cache API, that means the Snippets code can do some decisions based of the Cache API content. Do you plan to have a flag / return code / special header / etc, that could inform CF to not continue to the normal process (prevent calling a Worker) ?

Ideally that could be even better to permit us to choose another Worker (for example to switch from a v1 to a v2 of a project)

Old Man Maker•7/3/23, 3:04 PM

hey guys - just in case I am missing something - does CF have a solution for Authentication, such as email/pwd and or social accounts?

kian•7/3/23, 3:07 PM

Not really - Access exists but it's made for internal use (i.e employees)

Old Man Maker•7/3/23, 4:58 PM

thanks @kiannh & @mattrobb

RickOP•7/3/23, 5:11 PM

probably a weird question;
I want to use D1 for my apps db. I was wondering there are any benefits/cons to keeping my posts table in one db and the users table in another?
I want to optimize for space used in each db.

Walshy•7/3/23, 5:32 PM

Space should be the same regardless of what you do

Walshy•7/3/23, 5:32 PM

Either way content takes up what it takes up.

Walshy•7/3/23, 5:33 PM

I'd personally keep them in 1 DB but obviously different tables.

Totally up to you though on what you do

OOld Man Maker hey guys - just in case I am missing something - does CF have a solution for Aut...

dave•7/3/23, 6:03 PM

We ended up making our own after being sketched out by Supabase’s questionable implementations/lack of hardening.

Old Man Maker•7/3/23, 6:08 PM

Thanks @dave | ai.moda - I've build several out over the years, but mostly running on Azure with DB backend. The cost is pure crazy when you add up identity servers and all the rest of it. Although I've never used it, Firebase looks to be the most cost effective solution I've found with a backing store, JWT token support along with change events etc. I was hoping it was just something else the CF had built out, so I could keep it all together with the app. All good though - I'm sure it's in the works somewhere, it certainly would be a welcome service if they could keep the costs managed as well.

OOld Man Maker Thanks @dave | ai.moda - I've build several out over the years, but mostly runni...

dave•7/3/23, 6:09 PM

IMO they just need to change the pricing model for Access for SaaS.

Ddave IMO they just need to change the pricing model for Access for SaaS.

Old Man Maker•7/3/23, 6:09 PM

Firebase?

OOld Man Maker Firebase?

dave•7/3/23, 6:10 PM

Cloudflare Access

Old Man Maker•7/3/23, 6:11 PM

Fair enough. I've not looked into it to be able to comment. Thus far I've found CF pricing pretty compelling in most areas. Is it out of alignment with industry pricing or just generally expensive?

Old Man Maker•7/3/23, 6:13 PM

That's interesting @Leo

OOld Man Maker hey guys - just in case I am missing something - does CF have a solution for Aut...

aaaaaaaaaaaaaaaaa•7/4/23, 10:38 AM

I’ve used Azure AD B2C/Auth0 before as a CIAM.

aaaaaaaaaaaaaaaaa•7/4/23, 10:39 AM

Pre-warning Microsoft are merging Azure AD B2C with another product at the moment… plus you need to understand Microsoft’s proprietary XML framework to build custom identity solutions like Passwordless login, etc.

OOld Man Maker Thanks @dave | ai.moda - I've build several out over the years, but mostly runni...

dave•7/4/23, 3:26 PM

if you don’t care about needing to revoke a session, you don’t need anything persistent on the server side. JWT in a cookie works.

dave•7/4/23, 3:28 PM

We use https://github.com/panva/oauth4webapi

GitHub

GitHub - panva/oauth4webapi: OAuth 2 / OpenID Connect for JavaScrip...

OAuth 2 / OpenID Connect for JavaScript Runtimes. Contribute to panva/oauth4webapi development by creating an account on GitHub.