SvelteKit Auth in 15 Minutes

Auth is not nearly as hard as it used to be.
Thanks to cloudinary for sponsoring this series!
cld.media/bendavis
my stuff
discord: / discord
x (twitter): / bmdavis419
insiderviz: www.insiderviz.com
blok: www.theblokapp.com
timestamps
0:00 intro
0:40 lucia setup
6:40 login flow
11:45 protecting routes

[@bmdavis419]

This series is sponsored by cloudinary, definitely go check them out, their new Svelte SDK is fantastic and the beautiful performant images on Sediment would not have happened without them! cld.media/bendavis

[@Plunzi]

Ben, your videos are awesome and they really do help me out very often! Thanks for doing this.

[@rawlespringer3917]

I know you said one pro is that your users live in your database..but what are some of the cons of going with an open source library vs something like clerk or auth0? Also how does an authentication library differ from something like google oauth or github oauth that you spoke about?

[@muhammadfahadislam7069]

Thank you so much @bmdavis419 I loved the video & explanation was smooth. 100% out of 10%. I might be going to consider Lucia for actual Production environment.

[@nro337]

Great video!

[@biscuithammer]

we all be trippin' with the LSD stack! 💯

[@GabrielGasp]

I have a honest question for you Ben, do you consider this app production ready regarding libraries? What I mean is, do you trust these libraries like Drizzle and Lucia for an application that is expected to be maintained for a long period of time? I don’t dislike any of these new libraries, but I find it really hard to use them in the real world (outside of small personal projects). Maybe I’m being paranoid but I simply can’t trust them without a decent track record.

[@bmdavis419]

Lucia is such a lightweight library that I trust it, you can look at the source code and its just a bunch or nice helpers and all the data lives in ur db so I think its safe For drizzle I personally am betting on them in prod, they have a really good team and at the end of the day an ORM is something I feel comfortable switching out if I need to the big things I would not risk are file storage, database, a messageing/queue system, a auth provider (clerk, auth0, etc.)

[@paarkgrounds]

hi ben! how would you compare the advantages of this modular approach versus using a fully integrated BaaS like supa/fire/pocketbase?

[@bmdavis419]

I need to ship something with supabase before I can give a full opinion, will hopefully have one soon!

[@yanisxmine]

@@bmdavis419 please do! you have a great way of explaining things - just wish you did a few tutorials with just sveltekit + supabase combo. for beginners like me figuring out 2 tools is more realistic than 4 ;)

[@bmdavis419]

@@yanisxmine yea ill definitely go over those once I've done it I really just make videos on the stuff i have/am building which is why my videos tend to be all over the place

[@dhorimato8444]

Hi Ben! I have a question. I am using a helper function just like yours but it is not protecting nested routes. For example, /3092 is being protected, but /3092/randomized is not being protected. Any idea how I can go about fixing that?

[@bmdavis419]

It depends on where you are doing the check, if its in a layout then don't do that, move it to a specific page. Each should have a guard in its load function or API route

[@fedacuric8719]

Nice video, thanks. Would you mind sharing the code?

[@bmdavis419]

its in the description!

[@cotyhamilton]

Lucia Cinematic Universe or Some Shit 👏 😂

[@amerrashed6287]

Awesome Ben🎉. Is there github source code?

[@Richetechguy]

Lucia auth is great i just moved over to v3

[@mr.random8447]

Do you have an AuthZ library you use? That’s what I’m currently stuck on.

[@bmdavis419]

Auth 0? I moved off that a LONG time ago lol, I'm using lucia these days, or occasionally Clerk for react stuff

[@mr.random8447]

@@bmdavis419 No AuthZ, aka Authorization. Different than AuthN (Authentication). Yeah I use lucia too for AuthN

[@bmdavis419]

@@mr.random8447 oooh yea for that I just put an enum on my users table lol

[@mr.random8447]

@@bmdavis419 Oh, so just RBAC. Have you done ABAC before?

why not new supabase ssr?

[@bmdavis419]

this project was built a while ago, my next one is gonna use supabase

[@TheMrArmbull]

please give me link repo of this project

[@TheMrArmbull]

in your github account there is no this repo...

[@kaiden3514]

*PromoSM*

[@user-ru3jc8tf1x]

This tool sucks, i prefer auth0 or eartho

[@mr.random8447]

You don’t have control of your users and if your app scales prepare to pay up

[@mixed_nuts]

AuthJS is just so much more simple and straight forward