Andrew Israel - PropelAuth Blog | PropelAuth Blog

Andrew Israel

Adding Enterprise SSO / SAML to Laravel

Adding Enterprise SSO / SAML to Laravel

Laravel is a PHP-based web application framework. If you read through their marketing site, you’ll see a few common words like elegant, simple, and clean. And that’s because they focus heavily a great developer experience (DX), providing a lot of common functionality, like validation, object storage, db migration

Email Template Updates

Email Template Updates

It's day 3 of our Launch Week and we are excited to share that our email templates have gotten a makeover! When it comes to authentication related emails, there are two things that need to be considered: aesthetics and deliverability. From an aesthetic perspective, the emails need to

PropelAuth's Terraform Provider

PropelAuth's Terraform Provider

Authentication is a critical part of your infrastructure. And just like other pieces of infrastructure, you’ll want an easy way to update, revert, and audit configuration changes. That’s why we are excited to share: PropelAuth’s Terraform provider is out of beta! You can write HCL like this:

Drawing a Turkey
with CSS

Drawing a Turkey with CSS

We learned how to generate arbitrary shapes with CSS. We then learned how to scale, rotate, and position those shapes in order to create your own artwork. While you probably shouldn’t create giant works of art in pure CSS, you can use these techniques to add a little more pizzazz to your designs.

PropelAuth Python v4 Release

PropelAuth Python v4 Release

Today, we are excited to release a new version of our base Python library, as well as releases of our framework-specific libraries for FastAPI, Flask, and Django Rest Framework. Let’s jump in to some of the larger changes! Better Typing Support (breaking change) If you’ve used our Python

Building internal AI tools with Streamlit

Building internal AI tools with Streamlit

Most companies have a ton of valuable data internally. This could be analytics data on your customers interactions with your product. This could be an audit log of actions taken within the product (which is another way to see when different features are enabled). Even if you are a small

FastAPI Auth with Dependency Injection

FastAPI Auth with Dependency Injection

FastAPI is a modern web framework for building APIs in Python. It’s one of my personal favorite web frameworks as it has built-in support for OpenAPI specs (meaning you can write your backend code and generate everything from it) and it supports dependency injection. In this post, we’ll

Libraries for writing raw SQL safely

Libraries for writing raw SQL safely

One of my responsibilities at PropelAuth is writing example apps / guides in various languages / frameworks. It’s truly one of the most fun parts of my job. I get to play around with different stacks, new and old, and figure out the best ways to support our customers. Because of

Remix Authentication

Remix Authentication

We are very excited to officially release the @propelauth/remix library - a library that makes it incredibly easy to add authentication, authorization, and multi-tenancy to your Remix apps. If you want to jump straight to the docs, you can do so here. Choosing a JS Framework When it comes

OAuth2 in Simple Terms

OAuth2 in Simple Terms

If you’ve ever searched for OAuth (or OAuth2 or OpenID connect/OIDC), you’ve probably been greeted with a picture that looks like this: along with some descriptions of resource servers, the difference between authentication and authorization, consent screens, token endpoints, and more. And while that can be helpful,

Guide to Dependency Injection with FastAPI's Depends

Guide to Dependency Injection with FastAPI's Depends

One of the first concepts I learned at my first job was dependency injection. In this post we'll go over what it is and how to effectively use it, with FastAPI’s depends.

Complete Guide to State Management in React

Complete Guide to State Management in React

If you are writing a React application, you are almost certainly managing state somewhere. State is surprisingly hard to define, but easier to understand with examples: * An input box has state - which is often just the value in the input box. * A form has state - which is usually

React/FastAPI Starter Guide

React/FastAPI Starter Guide

This guide walks through the process of setting up authentication using PropelAuth on top of a product built in FastAPI & React. Setting up our Authentication UIs PropelAuth provides UIs for signup, login, and account management, so we don’t need to build them ourselves. To get started, let’s

Spring Boot Authentication and Authorization w/ Spring Security

Spring Boot Authentication and Authorization w/ Spring Security

Spring Boot makes it easy to create stand-alone, production-grade applications. Spring Security is the standard for securing Spring-based applications. In this post, we’ll look at a common way to set up Spring Boot as your backend with a separate frontend (with something like React, for example), multi-tenancy, and roles/

Advanced Roles and Permissions

Advanced Roles and Permissions

Today we’re bringing our RBAC system to the next level with the addition of Roles & Permission Mappings. Mappings make it possible for you to configure roles and permissions on a per-org basis. It’s best explained by an example: * You have two pricing plans: Free and Paid * Users

It’s not just you, Next.js is getting harder to use

It’s not just you, Next.js is getting harder to use

I wrote a blog post the other day about how Next.js Middleware can be useful for working around some of the restrictions imposed by server components. This led to some fun discussions in the world about whether this was a reasonable approach or if Next.js DX was just.

Guide to RBAC for B2B SaaS

Guide to RBAC for B2B SaaS

Role based access control (RBAC) is a method of answering the question “Can a user do this thing?” If you’ve ever used a product where some users are "Admins" or "Owners", and they can do more than everyone else, you’ve used a product with

Getting the Current URL in Next.js Server Components

Getting the Current URL in Next.js Server Components

You are writing a server component using the new(ish) App Router in Next.js, when you realize you need to get the current URL’s path. This could be for a sidebar, navbar, or even just breadcrumbs at the top of your page. Should be pretty easy, a quick

Streamlit Authentication

Streamlit Authentication

Streamlit is a powerful tool for creating “data apps.” The easiest way to understand it is with this picture (from Streamlit’s marketing site): You write python code ⇒ You get an interactive web application. It integrates easily with libraries you already know, like pandas and numpy. And the interactivity is

Becoming a Dungeon Master for an Interview

Becoming a Dungeon Master for an Interview

Interviews should be as close as possible to the work that the candidate would do if they join. While that seems like a pretty tautological statement, it is unfortunately not always true. When interviewing as a software engineer, for example, you’ll run into places that lean heavily on algorithms

Writing Clean Code with FastAPI Dependency Injection

Writing Clean Code with FastAPI Dependency Injection

Before anyone else read the code that I wrote, “clean code” wasn’t really a thing for me. I had no issues reading my code because, well, I wrote it. That was also pretty true for me in college as well. Classes rarely worried about the readability of code -

Building a Multi-Tenant App with FastAPI, SQLModel, and PropelAuth

Building a Multi-Tenant App with FastAPI, SQLModel, and PropelAuth

Building a multi-tenant (sometimes also known as B2B) product can be a trickier than building for consumers. Instead of handling users as individuals, you generally have to handle them working together in groups or teams. In this tutorial, we’ll walk you through how to create a multi-tenant link shortening

A Complete Guide To Using Cookies in Next.js

A Complete Guide To Using Cookies in Next.js

As Next.js has grown in complexity, it means there are a number of different ways to use cookies, each with their own caveats. You can read them in server components in the App Router, but you can’t modify them.

More User Insights: Churn & Reengagement Reports

More User Insights: Churn & Reengagement Reports

A couple of weeks ago, we announced the addition of metrics to our dashboard to make it easier to see what’s going on with your users at a glance. However, those metrics (while helpful) aren’t exactly actionable. It’s really useful to see how many active users you

Reanimating the GeoCities Experience with react-spring

Reanimating the GeoCities Experience with react-spring

Happy Halloween! And for Halloween, we wanted to make the scariest thing we could think of… a modern version of early 2000s web design patterns. We’re going to be building this: It’s a web app where a small flock of bats follow your mouse around. We’re specifically