Hacker News Reader

We used Hasura for a while, but it was too easy for clients to write queries which would take it forever to complete.

Postgrest was better, but we had trouble getting it to work with JWT, and have a reasonable permissions model.

Postgrest was DAMN fast though, it was really nice to work with.

In the end we had to write our own.

FYI query whitelisting is on its way in Hasura which pretty much solves the first issue

Query whitelisting has been available since beta 1. It is called Allow Lists :) https://docs.hasura.io/1.0/graphql/manual/deployment/allow-l...

We recommend every production app to setup Allow Lists to prevent arbitrary querying.