First time doing Auth using appwrite, thoughts?
Hey, it's my first time doing an auth system and I am using appwrite to make it easier and was wondering if someone could check the structure and code to see if there are any vulnerabilities or security risks on the way I did it.
It doesn't really have any error handling, it's just login/create, logout, and email verification really. And storing the user data in pinia.|
https://github.com/xMrAfonso/Summix
GitHub
GitHub - xMrAfonso/Summix
Contribute to xMrAfonso/Summix development by creating an account on GitHub.
2 Replies
Hi @Mr. Afonso. I'm kapa.ai, your friendly support bot. I will try to answer your question by searching through the knowledge base. :wave:
----------------------
I'm sorry, but the knowledge sources provided do not contain any information about using Appwrite for authentication in Nuxt, nor do they reference the specific repository you mentioned. The sources focus on authentication in Nuxt using modules like
nuxt-auth-utils, session management, protecting routes, and handling authentication state with Pinia, but do not cover Appwrite integration or review of external codebases.
If you are looking for general best practices for authentication in Nuxt, the official documentation recommends:
- Using secure, server-side session management (e.g., with nuxt-auth-utils)
- Protecting both client-side and server-side routes
- Storing sensitive data securely and not exposing it to the client unnecessarily
- Handling errors and edge cases, such as token expiration and invalid sessions
- Using middleware to guard protected pages and redirect unauthenticated users to the login page
- Avoiding direct reliance on client-side state (like Pinia) for authentication checks on protected API routes; always validate on the server as well
For a more specific review of your Appwrite-based implementation, you may want to provide code snippets or details about how you are handling authentication, error handling, and session management. If you adapt your approach to follow the patterns shown in the Nuxt documentation (such as using middleware and server-side checks), you will be following recommended security practices for Nuxt appsSessions and Authentication.
If you have questions about integrating Appwrite with Nuxt or want to compare your approach to the official Nuxt authentication recipes, please provide more details or code, and I'll do my best to help based on the available knowledge sources.
----------------------
Note: you can ask me a follow up question by @ mentioning me again :speech_balloon:
----------------------<@310721759110496257> Kapa.ai is still learning and improving, please let me know how I did by reacting below.