Are the components only available for React?
Thanks for the question! Right now we only have an SDK for React, but under the hood that SDK is a thin wrapper over Vanilla JS.
What other frameworks would you like to see prioritized?
Show HN: Clerk – all of user management as-a-service, not just authentication
121–130 of 234 posts
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#122Earlier quoted context omitted.
or, you could just do passwordless email auth and not have any security issues whatsoever.
Sure, because “do passwordless emails” is just a snap of the finger away, right? The point is that doing auth properly is hard. Sending an email might be easy, but creating and managing the session in a secure fashion is hard, even if you’re “just doing passwordless email auth”.
> Sure, because “do passwordless emails” is just a snap of the finger away, right?
uh, yes?
> The point is that doing auth properly is hard...
it works just like password reset no?
there's not much state with passwordless email auth as opposed to passwords.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#123Earlier quoted context omitted.
What's your job?
software engineer
Yeah :P But what are you building? Do you work at an agency building lots of new products? Or building internal apps?
Seems most companies don't need new boilerplate as everyone is just adding code to the existing product.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#124This is great. Do you have plans to provide any native mobile (iOS/android) support?
Yes - we're hiring now to help get this built! https://apply.workable.com/clerk-dev/
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#125Earlier quoted context omitted.
just use a fake email? you don't have to use your real email for everything, even google has forwarding addresses. and apple has private/forwarding emails as well, so this is a moot point.
Forwarding email increases risk of being hacked. They only have to get one of the emails to get into my account.
So you hack apple's private forwarding email service right, how would one get in?
I've even used G Mail's forwarding email for 6 years and I've never been hacked.
If you're concerned about this just use a fake email.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#126Earlier quoted context omitted.
Hi dubcanada, Thanks for your questions! It's good feedback that there's no security documentation up yet. We have a lot more content coming live in the next few weeks - but let me try to hit some of the most important points: * Session management is handled with secure, httpOnly cookies. We have you set a CNAME in production so we can set cookies in a first-party context (SameSite=Lax). * Cookies are scoped only to…
Glad you chose cookies for this versus localstorage JWT tokens. Kudos for that.
Out of curiosity, why are cookies preferred to local storage ?
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#127Really cool, love your positioning towards the frontend as frameworks like Django handle the static side fairly well.
I can't see it yet but I'm expectant you'd have ancillary forgot password & user management (manual signup/migration, disable account) flows in the works?
A "one more thing" to have me hooked would be user/team billing management .
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#128Earlier quoted context omitted.
Forwarding email increases risk of being hacked. They only have to get one of the emails to get into my account.
So you hack apple's private forwarding email service right, how would one get in? I've even used G Mail's forwarding email for 6 years and I've never been hacked. If you're concerned about this just use a fake email.
You’ve gone off on a personal tangent about how I as a user can increase my security. The topic of discussion was you claimed passwordless security had no security issues and I pointed out possible security issues. An individual can mitigate them, but they still exist
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#129Earlier quoted context omitted.
Just wonder price wise, if I signed up for the free and then switched over to paid it would be $249 for 5000 MAU. Compared to say Auth0, which would be $114 for 5000 MAU. The only difference is profile, and Auth0 mostly covers it by allowing you to easily store metadata. I am not sure I understand what makes Clark worth 2x Auth0?
Just wait until you find Userfront, which does the same thing for free until 10k users
Sometimes you get what you pay for. Personally I would not want my data managed by a company that doesn't even have a team page or mailing address (let alone security details) and appears to be using a Bootstrap template for their website.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#130Earlier quoted context omitted.
Just wonder price wise, if I signed up for the free and then switched over to paid it would be $249 for 5000 MAU. Compared to say Auth0, which would be $114 for 5000 MAU. The only difference is profile, and Auth0 mostly covers it by allowing you to easily store metadata. I am not sure I understand what makes Clark worth 2x Auth0?
Just wait until you find Userfront, which does the same thing for free until 10k users
Just looked it up. I don't know how I've never come across this. Reading the docs quickly it seems like this is cheaper and easier/more intuitive to set up than any other auth service. Will definitely be trying it with my next project, thank you.