Two questions: 1. Why use this over AWS Cognito? 2. Any intention to manage authorization as well?
Have you used Cognito? It sucks.
Cannot upvote this enough. Cognito is the absolute worst solution you could choose.
Show HN: Clerk – all of user management as-a-service, not just authentication
191–200 of 234 posts
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#192I'm probably not the main audience for this, but if you mention security as a top-level feature it might be good to fix these: https://securityheaders.com/?q=https%3A%2F%2Fclerk.dev https://securityheaders.com/?q=https%3A%2F%2Fdashboard.clerk... For me it is also a red flag to include third party CDN JS (especially without SRI) on security critical applications (like the login for the dashboard and customer logins do…
> For me it is also a red flag to include third party CDN JS Why anyone would use third party js for anything other than dev work is beyond me. Are people really building websites that can serve html, images, and css, but not js?
There was the use case at one point that serving a version of a popular 3rd party JS framework from a CDN would result in the likelihood of that file being able to be served from the browser's cache, because there would be a decent chance the end user had visited some other site that used the same popular framework.
That no longer works, see https://www.stefanjudis.com/notes/say-goodbye-to-resource-ca... and https://developers.google.com/web/updates/2020/10/http-cache...
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#193Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#194So, first, congrats on launching your product. :) Personally, I don't have a need for it, and if I did, I'd be very reluctant to use a proprietary service, but I'm sure there are companies out there who will be happy to use you. Good luck! ------------ That said, maybe the HN community can answer something I've wondered about... Why isn't there an Open Source, standardized, self-hosted, version of this kind of servic…
ever since facebook acquired, then liberated Parse [0], it kind of fulfills this role.
You can roll any subsystem of it and use off-the-shelf providers for other subsystems (we pay a service to host the server, but we run our own dashboard server to poke into it, others run their own database and use just the API server, etc), but I suppose it's easiest if you run the whole parse backend as a whole.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#195Earlier quoted context omitted.
Definitely! We've found that developers want to apply subscriptions against either Users or Organizations, so first we're planning to build out Organization management first (create an org, invite members, setup SAML auth, etc). Subscription management will follow sometime after, and will probably look like a Stripe integration that automatically creates Stripe Customer objects for your Users and Organizations. Is th…
In my case I don’t care about organizations. I am an individual dev who would love to use something like this to easily build apps that I could monetize. I am thinking of a web equivalent of the Apple iOS app store. Some place where you write an app and let the app store take care of billing and payments. I have published several iOS apps and zero web apps mostly because there is no frictionless way of monetizing web…
Hi Asim! Sounds super interesting, I'd love to learn more about them! I've messaged you on Linkedin.
- Tibor
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#196So, first, congrats on launching your product. :) Personally, I don't have a need for it, and if I did, I'd be very reluctant to use a proprietary service, but I'm sure there are companies out there who will be happy to use you. Good luck! ------------ That said, maybe the HN community can answer something I've wondered about... Why isn't there an Open Source, standardized, self-hosted, version of this kind of servic…
Maybe one of these fit your bill: keycloak, freeipa, gluu - they all have a bit of different scope and approach
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#197Earlier quoted context omitted.
Braden, one of the founders, I gave you an upvote! GDPR is definitely at the top of our mind. We would love to make it so developers don't need to think about, or make it easy to think about, GDPR and CCPA, and any future regulations that come up.
The question becomes; where is your company incorporated, where are your servers located. I was looking around on your website and it's very light on such details.
Does that matter really? For GDPR it's he users' location, no?
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#198Have you guys considered a open-core business approach? Would dramatically increase trust, and my willingness to throw money at you :)
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#199Earlier quoted context omitted.
It’s a great idea, but your company is going to be a serious target. You not only will have the ability to control authN, but you’ll own authR also if you’re managing users and groups. You’ll also own all the conference rooms, printers, servers, etc., since you’ll be hosting Active Directory for the Windows folk... at least that’s how I’d understand user management for auth.
Is authR another way to say authZ? I've never heard of authR and a quick google seems to mostly show a cloudflare project and stuff related to the term "author".
I think authN is Authentication and authR is authorisation. Two related but slightly different concepts. The third of the trio is Accounting which completes the AAA, the family of protocols that mediate access on the internet [0]
[0]: https://en.wikipedia.org/wiki/AAA_(computer_security)
edit: added reference and context for completion.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#200So, first, congrats on launching your product. :) Personally, I don't have a need for it, and if I did, I'd be very reluctant to use a proprietary service, but I'm sure there are companies out there who will be happy to use you. Good luck! ------------ That said, maybe the HN community can answer something I've wondered about... Why isn't there an Open Source, standardized, self-hosted, version of this kind of servic…
ever since facebook acquired, then liberated Parse [0], it kind of fulfills this role. You can roll any subsystem of it and use off-the-shelf providers for other subsystems (we pay a service to host the server, but we run our own dashboard server to poke into it, others run their own database and use just the API server, etc), but I suppose it's easiest if you run the whole parse backend as a whole. [0]: https://pars…
I’ve always wondered why parse was never more popular as a backend for people hosting personal and small scale stuff?