Live data from Hacker News

Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

github.com

11–20 of 51 posts

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#11

Founder / project creator here. Ory Kratos has been in development since 2018 and is approaching version 1.0! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)

What's left before you'll be ready to release 1.0 and how will the project change once you've reached that milestone?

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#12
post #10

Earlier quoted context omitted.

Funny how you claim to support GDPR but your own site displays a non-compliant cookie banner.

Their cookie banner is provided by a 3rd party and I can’t see how it is non-compliant unless there is something I’m missing.

Because it's a 3rd party, it cannot be non-compliant?

Seems like it's 1 extra click to disallow compared to allow, so yeah, non-compliant. Should be exactly as easy to say yes as saying no. In this case it's not.

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#13

Founder / project creator here. Ory Kratos has been in development since 2018 and is approaching version 1.0! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)

What's left before you'll be ready to release 1.0 and how will the project change once you've reached that milestone?

Check out the milestone on github: https://github.com/ory/kratos/milestone/15

not sure if that is everything.

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#14
post #3

A great example of a website that completely fails to clearly explain how it's different from the competition.

I think their Github "About" text is quite clear imho. An open source identity service that can be an alternative to similar commercial ones like Okta, Auth0.

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#15

Founder / project creator here. Ory Kratos has been in development since 2018 and is approaching version 1.0! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)

Is this an alternative to Keycloak? One thing Keycloak supports is the ability to create multiple realms in order to use one instance for different groups of users and applications. Does Kratos support something like that?

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#16
A while ago my team needed exactly this kind of auth solution, so the eng team reached out to Ory to clarify some technical questions that weren't covered by the docs. We were super enthusiastic about Ory. It looked solid, was open-source, and ticked all the right boxes.

We got an immediate response by a very motivated sales person who insisted to be connected with management and refused to put us in touch with anybody technical. It was a pretty off-putting experience, because it basically presumed that our eng team wasn't the decision maker (it was). I know a lot of companies throw their sales people at you, wanting to get in touch with somebody higher in the org chart, but it's still a pretty insulting experience for a tech-driven organization.

Needless to say we went with something else (not Auth0 either) and have been very happy.

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#17
post #10

Earlier quoted context omitted.

Their cookie banner is provided by a 3rd party and I can’t see how it is non-compliant unless there is something I’m missing.

Because it's a 3rd party, it cannot be non-compliant? Seems like it's 1 extra click to disallow compared to allow, so yeah, non-compliant. Should be exactly as easy to say yes as saying no. In this case it's not.

Overblown criticism like this give GDPR an undeserved bad rep.

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#18
post #10

Earlier quoted context omitted.

Funny how you claim to support GDPR but your own site displays a non-compliant cookie banner.

Their cookie banner is provided by a 3rd party and I can’t see how it is non-compliant unless there is something I’m missing.

It's their choice to chose that banner, and their choice to configure it this way. Most third-party banners are non-compliant, including this one. Which they should know, given that they advertise GDPR compliance for their main product.

The banner should have a Reject All option, preferably as default action.

Also relevant: https://noyb.eu/en/where-did-all-reject-buttons-come

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#19
post #17

Earlier quoted context omitted.

Because it's a 3rd party, it cannot be non-compliant? Seems like it's 1 extra click to disallow compared to allow, so yeah, non-compliant. Should be exactly as easy to say yes as saying no. In this case it's not.

Overblown criticism like this give GDPR an undeserved bad rep.

It's not overblown criticism. They advertise their product as GDPR-compliant, and yet their website uses dark patterns to trick people into allowing tracking, and is not GDPR-compliant.

Do I trust them to be as diligent in their product?

And yeah, what gives GDPR bad rep is exactly these kinds of dark patterns and other forms of malicious compliance by non-caring companies.

Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0

#20

Founder / project creator here. Ory Kratos has been in development since 2018 and is approaching version 1.0! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)

Is this an alternative to Keycloak? One thing Keycloak supports is the ability to create multiple realms in order to use one instance for different groups of users and applications. Does Kratos support something like that?

Isn't that aspect of Keycloak a carryover from the days when one VM held one instance of an application? These days containers are cheap and you can just spin up each "realm" in another container.
Post reply on HN