supabase
MFA Your UI Can't Bypass: Enforcing TOTP in Postgres with Supabase
We added two-factor authentication to our home-grown team app in about a day — but the interesting part isn't the QR codes. It's making Postgres itself refuse to serve data to a session that hasn't passed the second factor, and the traps we hit doing it live.