I want to love ory but honestly I have no idea how to integrate it like I can with supertokens. Literally looking to move from supertokens and have spent 4 hours trying to grok how to make the change. The docs are OK but how the products interconnect is super opaque.
Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
21–30 of 51 posts
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#22Cool to see Kratos mentioned here! A friend spent a bit of time coming up with a miniature OAuth provider implemented in Benthos (https://www.benthos.dev/) and Bloblang (https://www.benthos.dev/docs/guides/bloblang/about/). It is designed to serve a single OAuth client app and will generate JWT access tokens with limited lifetime: https://gist.github.com/disintegrator/0bd39879c437c4b3abb277...
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#23A while ago my team needed exactly this kind of auth solution, so the eng team reached out to Ory to clarify some technical questions that weren't covered by the docs. We were super enthusiastic about Ory. It looked solid, was open-source, and ticked all the right boxes. We got an immediate response by a very motivated sales person who insisted to be connected with management and refused to put us in touch with anybo…
What did you go with?
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#24Earlier quoted context omitted.
Because it's a 3rd party, it cannot be non-compliant? Seems like it's 1 extra click to disallow compared to allow, so yeah, non-compliant. Should be exactly as easy to say yes as saying no. In this case it's not.
Overblown criticism like this give GDPR an undeserved bad rep.
Incorrect implementations give GDPR a bad reputation, though there are worse ones.
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#25Earlier quoted context omitted.
Because it's a 3rd party, it cannot be non-compliant? Seems like it's 1 extra click to disallow compared to allow, so yeah, non-compliant. Should be exactly as easy to say yes as saying no. In this case it's not.
Overblown criticism like this give GDPR an undeserved bad rep.
Either we have regulation and call people out when they don't follow it and hopefully eventually fine them, or we can just skip it all together.
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#26A while ago my team needed exactly this kind of auth solution, so the eng team reached out to Ory to clarify some technical questions that weren't covered by the docs. We were super enthusiastic about Ory. It looked solid, was open-source, and ticked all the right boxes. We got an immediate response by a very motivated sales person who insisted to be connected with management and refused to put us in touch with anybo…
Hey, Founder here. Sorry to hear that. The sales process should be a net benefit for anyone involved. I’m really keen on fixing this (and had my fair share of bad sales calls too). Would you mind sending me a quick email to aeneas@ory.sh - I just want to figure out what needs to change for the org to become better. Appreciate it! I won’t sell you anything, promised ;)
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#27A while ago my team needed exactly this kind of auth solution, so the eng team reached out to Ory to clarify some technical questions that weren't covered by the docs. We were super enthusiastic about Ory. It looked solid, was open-source, and ticked all the right boxes. We got an immediate response by a very motivated sales person who insisted to be connected with management and refused to put us in touch with anybo…
Can't share that experience.
We are in the process of migrating from Azure B2C to ORY Network and had also some initial doubts if their products are a good fit for our enterprise company.
Our company is three hours away from their office in munich, but they were willing to send us an experienced engineer to answer all of our questions. This was very much appreciated and helped us a lot. They also offer the possibility to purchase dedicated slack channel support.
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#28Ory’s killer feature is that it’s billed by DAUs not MAUs.
It makes cost much lower and more consistent.
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#29A great example of a website that completely fails to clearly explain how it's different from the competition.
I agree that we can do better here. Do you have a comparison in mind that you really liked?
The frontpage should make it clear which open source project corresponds to which Ory Network product.
I was confused about that for a while.
Ex:
Login & Authentication -> Kratos
Permissions & Access Control -> Keto.
You could take some cues from Grafana here.
Similarly to Ory, their product is backed by OSS.
Their frontpage’s navigation bar makes it clear which is backed by which.
Re: Show HN: Open-source Auth0 alternative Ory Kratos v0.13 released – nearing v1.0
#30Earlier quoted context omitted.
Is this an alternative to Keycloak? One thing Keycloak supports is the ability to create multiple realms in order to use one instance for different groups of users and applications. Does Kratos support something like that?
Isn't that aspect of Keycloak a carryover from the days when one VM held one instance of an application? These days containers are cheap and you can just spin up each "realm" in another container.
Just because you can architecturally do that today, doesn't mean that you have to and that everyone does.
I do run Keycloak in a container but I'm pretty sure spinning up a new instance for every realm would be more resource intensive than using multiple realms in the same instance.
It's just a question of use case at the end of the day. In my use case I only need this for small internal tools so it's easier to just spin up one instance for me.