Saasworld
← The Library
AuthSupabase · Clerk13 min read

Auth: sessions, tokens and providers

What a session actually is, cookies versus tokens, JWTs without the mystique, the OAuth redirect dance, protecting server code properly, and how identity reaches your database's row policies.

What this one covers
  • ·The actual problem
  • ·Cookies, properly configured
  • ·JWTs, demystified
  • ·The OAuth dance
  • ·Protecting routes and server actions
  • ·How identity reaches your row policies
  • ·Choosing one
Subscription

The Library

Everything running a software business asks of you and none of it is code: onboarding that activates, churn you can actually see coming, marketing with no budget, SEO that finds buyers, and the AI-plus-Ahrefs workflow for writing the blog that feeds it. One new playbook a week, plus the whole archive from day one.

$9/ month · cancel any time
  • A new playbook every week — onboarding, churn, growth, SEO, content
  • The full back catalogue the moment you join, not drip-fed
  • Vendor explainers: Stripe, Supabase, Resend, Vercel, the AI APIs
  • The research shelf — real papers, decoded, on learning and on LLMs
  • One email when a new one lands, off by default in one click
  • Cancel any time; you keep reading to the end of the month

first — it takes ten seconds.

No card is asked for yet — the subscription is recorded and really opens your account. See all plans →