Are there any thoughts on creating an Auth Worker for fullstack developers to use? Similar to AWS Co

Are there any thoughts on creating an Auth Worker for fullstack developers to use? Similar to AWS Cognito?

I am currently developing a Cloudflare worker that leverages D1 and Lucia to implement this, and it works for sign-up/sign-in, but if there was already Cloudflare service that could handle this, that would be awesome! Because i still need to implement auth workflows like forgot/reset password, email sign-in, magic links, Google OAuth, etc.

UUnsmart The docs explain this here: <https://developers.cloudflare.com/workers/runtime-a...

captain_enjoyable•3/11/24, 5:02 PM

I'm still confused. The doc you linked says for Global Purges visit here when I visit there it says.

To purge an asset globally, you must use the standard cache purge options. Based on cache API implementation, not all cache purge endpoints function for purging assets stored by the Cache API.

and also

Currently, it is not possible to purge a URL stored through Cache API that uses a custom cache key set by a Worker. Instead, use a custom key created by Page Rules. Alternatively, purge your assets using purge everything, purge by tag, purge by host or purge by prefix.

This does not make it particularly clear how the worker caches.defaultcaches.default interacts with the global API.

What I'm gathering is because "not all cache purge endpoints function for purging assets stored by the Cache API" my only option is to use the global purge or upgrade to enterprise and use cache tags. Is that right?

NNicolas Are there any thoughts on creating an Auth Worker for fullstack developers to us...

dave•3/11/24, 5:13 PM

my company made this internally for ourselves, we literally have a project called auth-workerauth-worker internally

NNicolas Are there any thoughts on creating an Auth Worker for fullstack developers to us...

dave•3/11/24, 5:13 PM

There's only Cloudflare Access, but the pricing does not scale at all for SaaS use-cases.

Ddave my company made this internally for ourselves, we literally have a project calle...

NicolasOP•3/11/24, 5:20 PM

Oh wow lol that's awesome, yea this seems to be a big miss by Cloudflare, I suppose it's in their best interest then to NOT implement something like this as this would be far less profitable for them. @Devon created this project that I will be trying to use as well: https://github.com/devondragon/workers-users

GitHub

GitHub - devondragon/workers-users: Cloudflare Workers based User M...

Cloudflare Workers based User Management and Session State Framework - devondragon/workers-users

NNicolas Oh wow lol that's awesome, yea this seems to be a big miss by Cloudflare, I supp...

dave•3/11/24, 5:21 PM

that looks decent! We went the OAuth2/OIDC only approach. You'll get a failure at the end (since you're not meant to directly visit the URL), but here's our auth page: https://auth.ai.moda/pages/v1.0.0/login

SSO - ai.moda

SSO for ai.moda.

Unsmart•3/11/24, 5:22 PM

In general doing the auth yourself is far better so im not too surprised they dont have anything for it. Cloudflare access is pretty different use case entirely and makes a lot of sense.

UUnsmart In general doing the auth yourself is far better so im not too surprised they do...

dave•3/11/24, 5:23 PM

eh, I'd say the opposite, never do auth yourself

NicolasOP•3/11/24, 5:25 PM

yeaaa that's pretty risky, auth is not trivial at all, and is very time consuming and requires a lot of research to do properly, having something like the repo i posted above, would be ideal, so you can just integrate it into your monorepo and add any customer attributes or multi-tenant kind of functionality, but you don't have to reinvent the wheel when it comes to the technical implementation of auth

Unsmart•3/11/24, 5:25 PM

I've had to use auth providers at my work for a while now they all suck and are super expensive for no reason... finally switched over to doing it myself and its sooo much easier to work with

NicolasOP•3/11/24, 5:26 PM

if Cloudflare did have something like auth-workers, i'm sure it would encourage waaay more fullstack developers to use Cloudflare because its one less thing they have to worry about, that's why some people just use AWS Cognito

UUnsmart I've had to use auth providers at my work for a while now they all suck and are ...

dave•3/11/24, 5:26 PM

it's a huge time sink though initially

Unsmart•3/11/24, 5:27 PM

Took me less time to do it myself then to implement any of the auth providers we tried to use :LUL:

Unsmart•3/11/24, 5:28 PM

Also way better because it doesnt rely on jwts like most if not all auth providers pretty much force you too so I can actually force logout someone immediately instead of after a few minutes.

Unsmart•3/11/24, 5:30 PM

Also dont have to try and sync data from my auth provider to my database or my database to the auth provider now so much nicer in every way imaginable

NicolasOP•3/11/24, 5:30 PM

Yea it seems that session cookies are the way to go, checkout Lucia auth, its probably the best open-source auth library, and it has a database adapter for D1, so I was going to try to develop something with that, possible integrating into the repo that Devon made

Unsmart•3/11/24, 5:31 PM

I do use lucia auth

Unsmart•3/11/24, 5:32 PM

Lucia auth is still a do it yourself fwiw. When I talk about auth providers and not doing it yourself I mean auth0/cognito/etc

Unsmart•3/11/24, 5:33 PM

Libraries that just aid in doing it yourself like lucia are perfect

X7md•3/11/24, 6:15 PM

Can set worker to specific region?

XX7md Can set worker to specific region?

X7md•3/11/24, 6:16 PM

I remember I saw a trick maybe related to D1, that force Worker to be in specific region, I lost the post in X platform...

Devon•3/11/24, 6:21 PM

https://developers.cloudflare.com/workers/configuration/smart-placement/

Cloudflare Docs

Smart Placement (beta) · Cloudflare Workers docs

Speed up your Worker application by automatically placing your workloads in an optimal location that minimizes latency.

Devon•3/11/24, 6:21 PM

Is that what you're thinking of?

Chaika•3/11/24, 6:21 PM

^ with smart placement enabled and D1 bound, it'll run closes to the D1 DB

DDevon https://developers.cloudflare.com/workers/configuration/smart-placement/

X7md•3/11/24, 6:21 PM

Yeah maybe that it

Chaika•3/11/24, 6:22 PM

keeping in mind you're still ingressing to the closest point to you/it's still processing your http request there and everything (Cf has seperate data localization services if that's what you need), it's simply executing the Worker somewhere else

X7md•3/11/24, 6:23 PM

Noble•3/11/24, 7:13 PM

Does workers support Go (programming language) ?

NNoble Does workers support Go (programming language) ?

Isaac McFadyen•3/11/24, 7:25 PM

As long as that Go compiles to WASM (Web Assembly). I believe the current approach right now is via tinygotinygo which is quite restrictive in what you can use, althought it can be done.

SageSphinx63920•3/11/24, 7:30 PM

Which way to do yall use to make http POST requests? I am not that used to nodejs or workes to know some lightweight way to do this

SageSphinx63920•3/11/24, 7:31 PM

Its just a simple POST request with 2 headers and some JSON payload

SageSphinx63920•3/11/24, 7:31 PM

And the return is also just some simple JSON object

Alisson Acioli•3/11/24, 7:33 PM

Can anyone here somehow use React or Next with Cloudflare Workers?

Unsmart•3/11/24, 7:35 PM

You can use both cloudflare pages makes it easy

Alisson Acioli•3/11/24, 7:36 PM

Yes, I saw here that it is easier with Pages but I wanted to try with Workers. Is there any code compatible with today's workers? I had found "Flareact" but its wrangler settings are very old, the last update in the repository was 3 years ago

IIsaac McFadyen As long as that Go compiles to WASM (Web Assembly). I believe the current approa...

Noble•3/11/24, 7:39 PM

Thanks @Isaac McFadyen | YYZ01 that was very helpful. Let me check the tinygo package

SSageSphinx63920 Which way to do yall use to make http POST requests? I am not that used to nodej...

Isaac McFadyen•3/11/24, 7:42 PM

Try the fetch API. It's included automatically in Workers but it's not workers-specific, it's the same one as in all modern browsers.

Isaac McFadyen•3/11/24, 7:42 PM

https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API

SageSphinx63920•3/11/24, 7:43 PM

Thx :)

AAlisson Acioli Yes, I saw here that it is easier with Pages but I wanted to try with Workers. I...

Hello, I’m Allie!•3/11/24, 7:45 PM

Pages is generally Workers + Website hosting stuff. Most of what you can do on Workers, you can also do on Pages

fs0x30•3/11/24, 8:24 PM

Run into a weird problems. My worker is currently doing a fetch() for me to get certain resources. The resource site blocks certain IP ranges which is understandable. When I call my worker's endpoint (deployed) which would then fetch the resource for me from my dev machine, it works. But once I push the code to a server which then calls the worker's endpoint, it is blocked. So does the worker's IP somehow derived from the caller of the worker? Or I am calling from 2 different CF datacenter and one of it is blocked by the site?

fs0x30•3/11/24, 8:27 PM

or is the caller ip being forwarded through HTTP headers

Ffs0x30 Run into a weird problems. My worker is currently doing a fetch() for me to get ...

Hello, I’m Allie!•3/11/24, 8:29 PM

No, but Cloudflare uses multiple IP ranges for outbound calls. It may be that only some of them are blocked

Alisson Acioli•3/11/24, 8:32 PM

Are image, js, css files counted as calls on pages or are only visits counted? Imagine that I have a website that has js, css and 3 images. Will it charge like 6 calls? (1 visit + 5 assets?)

Alisson Acioli•3/11/24, 8:32 PM

in Cloudflare Pages?

AAlisson Acioli Are image, js, css files counted as calls on pages or are only visits counted? I...

Hello, I’m Allie!•3/11/24, 8:32 PM

It will only be charged if your requests are served by Functions

HHello, I’m Allie!No, but Cloudflare uses multiple IP ranges for outbound calls. It may be that on...

fs0x30•3/11/24, 8:32 PM

That's my thought or the caller's IP is being forwarded through the HTTP headers like x-forward and connecting-ip which the resource site is using to also block. I believe the resource API is also on CF

Hello, I’m Allie!•3/11/24, 8:32 PM

If they are not, then those requests would be free

HHello, I’m Allie!It will only be charged if your requests are served by Functions

Alisson Acioli•3/11/24, 8:34 PM

For example, I deployed NextJS hello world: https://baf257f6.my-next-app-qpn.pages.dev/

In this call it is loading css, js and some images. For each user visit to pages, I would be charged as 1 request and not per call including these assets?

Create Next App

Generated by create next app

Alisson Acioli•3/11/24, 8:38 PM

I found an explanation in the documentation here. Thank you very much @HardlyWorkin'

Ffs0x30 That's my thought or the caller's IP is being forwarded through the HTTP headers...

Hello, I’m Allie!•3/11/24, 8:40 PM

Might be wrong, but looks like it does add a Cloudflare IP address in the Connecting-IP

Are there any thoughts on creating an Auth Worker for fullstack developers to use? Similar to AWS Co

Similar Threads

Similar Threads

Similar Threads