Supabase Auth Engineer here. You are right that a token set is issued and that the authorization server will return an access_token and a refresh_token after validating the code_verifier we chose the term "session" instead of token set as a token (loosely speaking) maps to a server session and we felt that might be easier to understand for our readers who are coming in without an auth background. Sorry for any confusion caused that might have caused.
Thanks for the heads up about replay attacks - we'll be sure to let the Kotlin/Java library developers know about the potential vulnerabilities that you've mentioned.
Supabase Auth Engineer here, also happen to be one of the Python library maintainers. We're looking into a more general approach for "server-side" languages such as Python, Ruby, etc but at the moment the python library is still community supported.
Do you mind sharing more about what you're building and the features of Supabase which would be most important to you?
Sorry to hear that you feel that the title is misleading. It was definitely not my intention to mislead - the MySQL For Developers thread had some great content and I thought that PostgresPro's content would be a useful Postgres centered complement to what was posted. I'd looked through PostgresPro training material in the past and thought that there were useful snippets in the courses mentioned in the link above.
Could you tell me more about what you felt was misleading, and what you were expecting instead? If you have a preferred title in mind for this post I'm happy to try and change that too.
Sorry if there was any confusion caused, it was not my intention to mislead any users. I'll update the post with a (hopefully clearer) name. Perhaps "PostgreSQL training courses"?
Quick (and quite possibly ignorant) question though: what's the difference between a "training course" and what's listed there though? Seems like the content in the course linked covers views, functions, etc. which is content which I could see a Postgres developer using regularly
I believe both the Introduction to PostgreSQL and DEV1: Basic Server-Side Application Development courses are free. You can find the corresponding YouTube lectures by clicking on the respective links.
Disclaimer: I didn't make either course, just chanced upon them a while back
Thanks for the heads up about replay attacks - we'll be sure to let the Kotlin/Java library developers know about the potential vulnerabilities that you've mentioned.