Loading...
Setting Up Workflows Around Accounts - Revisited: Adding Security
Setting Up Workflows Around Accounts - Revisited: Adding Security
In this follow-up tutorial, we'll secure the workflow setup we built around accounts. As you may recall, we had to disable authentication for API calls because users weren't authenticated during account creation. We'll now implement a more secure approach by listening to events sent by Supabase.
Payments
Learning Highlights
- 0:45
Understanding why bypassing authentication during signup creates security vulnerabilities and how to properly secure account creation workflows.
- 1:51
Learn how event-driven architecture enables secure account creation by listening to Supabase authentication events instead of creating accounts immediately at signup.
- 2:58
The key to secure user onboarding flows involves creating auth users first, then triggering account creation only after email confirmation validates the user.
- 4:32
Pre-production is the ideal time to refactor security implementations, as demonstrated by fixing authentication workflows before deploying to production at Vibe Coding Academy.
Ready to start a new course?
Continue your learning journey with these carefully curated courses
Course
Setting-up a database with Supabase, and building our first CRUD API endpoints
Learn how to connect your application to a Supabase database, then validate the setup by creating your first API endpoints to perform basic CRUD operations (Create, Read, Update, Delete).
6 lessons
0 min
Jules BoiteuxFounder @Vibe Coding Academy
Course
Webhooks Mastery for Product Builders
Many third-party integrations rely on webhooks. Stripe is one of the most important examples, which makes it essential to understand how to implement webhooks correctly in your app and build reliable business logic on top of them.
5 lessons
0 min
Jules BoiteuxFounder @Vibe Coding Academy
