annuaire-entreprises-sirene-api VS graphile-engine

One of the project which list all the data for entreprise addresses uses Postgrest (open data SIRENE de l'INSEE).

Full fledge project implemented, interesting use of PostgREST

https://github.com/etalab/annuaire-entreprises-sirene-api

But it doesn’t have to work this way. Some modern databases support a feature called "row-level security". It allows you to define access control policies at the row level based on the current user’s attributes (id, role, group membership, etc.). As long as the application can securely pass the current user’s identity to the database, it can leave all authorization checking to the database. And since the rules are defined at the table level instead of the API level, it has a much smaller surface to protect. The "row-level security" feature is the foundation of products like PostgREST, PostGraphile, and Supabase.

I really love the way pg-sql2 is going about that.

I've been enjoying developing on top of PostGraphile. https://www.graphile.org/

Good starter: https://github.com/graphile/starter

I can add a column the the db, and my frontend gets that autimagically (in dev mode, it generates a graphql schema out of the db, and from that it creates composables for my frontend wiht graphql-codegen). On the frontend I use Vue 3, the starter is build with nextjs/react.

I don't much direct knowledge on the internals, but here's a snippet from the graphile-engine repo README: