DEV Community

Discussion on: How do you handle role/permissions updates with JWT?

Collapse
 
sebastiandg7 profile image
Sebastián Duque G

I'd love to know how this works by when you have it ready. Some time ago I did an Angular + Firebase app with a similar structure. But, we store user roles inside the Firebase generated token using auth sdk in functions, there was a db node (realtime database, not firestore) which the client app was listening for changes in order to know when to fetch a new token and update it's roles.

That way, db access rules could be written using the 'auth' object... But things didn't end up very good as we expected it. The function in charge of assigning the recently created user sometimes took very long to do it's work (related to the function's cold start).

Any way, your architecture seems to be promising. Let me know how it ends!