The Aleks Comments - Convex Community

The Aleks

•Created by RJ on 10/30/2023 in #support-community

Math.random unsupported while evaluating schema

I like the idea of doing effect through and through, but the maintenance overhead of that seems pretty steep. Especially with the upcoming "local first" and "tanstack" apis

73 replies

CCConvex Community

•Created by RJ on 10/30/2023 in #support-community

Math.random unsupported while evaluating schema

I'm setting up my current project with TanstackStart and using the Tanstack Query integration. I'll use Effect on the client, but I'm okay expecting serialized values from the server and then just picking it up fromt here

73 replies

CCConvex Community

•Created by RJ on 10/30/2023 in #support-community

Math.random unsupported while evaluating schema

2. Is what would require it I imagine. I wasn’t planning on returning anything but serializable types though - which would also allow me to work with the standard convex clients (and the ones for start).

73 replies

CCConvex Community

•Created by RJ on 10/30/2023 in #support-community

Math.random unsupported while evaluating schema

@RJ why do we have to explicitly define return types? Couldn't we infer those?

73 replies

CCConvex Community

•Created by RJ on 10/30/2023 in #support-community

Math.random unsupported while evaluating schema

This looks pretty great! I’m excited to dig in now that I’m back in Convex

73 replies

CCConvex Community

•Created by RJ on 10/30/2023 in #support-community

Math.random unsupported while evaluating schema

@RJ did you end up writing some helpers for using Effect (and effect schema) with Convex?

73 replies

CCConvex Community

•Created by RJ on 10/30/2023 in #support-community

Math.random unsupported while evaluating schema

73 replies

CCConvex Community

•Created by The Aleks on 1/12/2024 in #support-community

auth.config.js and lucia auth

I appreciate you diving into this and doing some thinking on it. I think it's easy to accept that "Clerk", "Kinde" and "Auth0" must have figured it out and as a result fail to actual introduce the diligence needed to make things safe. One issue I see with the suggested Lucia Session implementation though: If an attacker gets your sessionID, you won't know. So while stopping the attacker is easy, you might be oblivious to it for a long time. This is one thing that rotating RefreshToken solves - which we obviously could do with SessionIds as well: We rotate them every 30 minutes. Meaning either me or the attacker will be logged out when it rotates

8 replies

CCConvex Community

•Created by Web Dev Cody on 1/17/2024 in #support-community

curious, how does convex stack up against supabase realtime and firebase?

@Web Dev Cody Supabase Realtime is built partly on top of Postgres realtime features (and Phoenix PubSub). And yes, it is a pain to setup and manage for some of the reasons I mentioned above. Some super interesting frameworks coming out building around it though right now, but the thinking and the tooling they're building is similar to what Convex is offering

10 replies

CCConvex Community

•Created by Web Dev Cody on 1/17/2024 in #support-community

curious, how does convex stack up against supabase realtime and firebase?

in short: In supabase it's up to you to figure out what to refetch when a row changes. In Convex it figures it out for you. Change any dependency in a query and all queries update. You get reliable realtime for free. With supabase that's not the case (lots of other things to love about Supabase though)

10 replies

CCConvex Community

•Created by The Aleks on 1/12/2024 in #support-community

auth.config.js and lucia auth

Something like this (which could relatively easily be handled with NextJS), also doesn't seem to be possible since the client needs to communicate directly with Convex: https://medium.com/@benjamin.botto/secure-access-token-storage-with-single-page-applications-part-2-921fce24e1b5 I know it's been a discussion a few times before, but it does increasingly point towards Convex taking a stronger stance on what a convex first auth solution would look like. I can afford to ignore this problem for now though, and will probably just revert to Clerk etc. to get a little added safety in the form of rotating refresh tokens.

8 replies

CCConvex Community

•Created by The Aleks on 1/12/2024 in #support-community

auth.config.js and lucia auth

Thank you @Michal Srb - that does make sense. Everything is working well, but while the ease of passing sessionId's is great, I do worry about the security implications of it. Since the sessionId will need to be sent as an argument to convex, and will need to be accessible n JS, it'll now be susceptible to client side attacks. And unlike refresh tokens, sessionId's with Lucia are only ever extended and not invalidated (unless you log out) https://security.stackexchange.com/questions/223002/session-id-in-custom-header#:~:text=Sending%20session%20tokens%20in%20custom,exceptionally%20vulnerable%20to%20token%20theft.

8 replies

CCConvex Community

•Created by The Aleks on 11/24/2023 in #support-community

Module "convex/server" has no exported member SystemTableNames

Amazing! Thank you @ian 😍

9 replies

CCConvex Community

•Created by The Aleks on 11/24/2023 in #support-community

Module "convex/server" has no exported member SystemTableNames

It was. Does pnpx/npx respect your package json?

9 replies

CCConvex Community

•Created by The Aleks on 11/24/2023 in #support-community

Module "convex/server" has no exported member SystemTableNames

Would be amazing to get a typing update to the helpers so I can fix this going forward. That being said, using npx convex in vercel should probably be versioned to the same version as the project being deployed

9 replies

CCConvex Community

•Created by The Aleks on 11/24/2023 in #support-community

Module "convex/server" has no exported member SystemTableNames

Okay, so traced it down: - The relationship and rowLevelSecurity helper typings need to be updated to support 1.6.2 - The convex CLI used by vercel will use 1.6.2 - Locally I'm using 1.5.1

9 replies

CCConvex Community

•Created by The Aleks on 11/24/2023 in #support-community

Module "convex/server" has no exported member SystemTableNames

It's creating weird errors across the different convex helpers (relations helpers for instance).

9 replies

CCConvex Community

•Created by The Aleks on 11/24/2023 in #support-community

Module "convex/server" has no exported member SystemTableNames

hmmm... A full uninstall and reinstall of Convex fixed it

9 replies

CCConvex Community