[deleted]
Show HN: Clerk – all of user management as-a-service, not just authentication
201–210 of 234 posts
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#202So, first, congrats on launching your product. :) Personally, I don't have a need for it, and if I did, I'd be very reluctant to use a proprietary service, but I'm sure there are companies out there who will be happy to use you. Good luck! ------------ That said, maybe the HN community can answer something I've wondered about... Why isn't there an Open Source, standardized, self-hosted, version of this kind of servic…
https://www.userfrosting.com/ is a good open source solution in this space actually.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#203Earlier quoted context omitted.
The question becomes; where is your company incorporated, where are your servers located. I was looking around on your website and it's very light on such details.
Does that matter really? For GDPR it's he users' location, no?
It can matter. It's possible for servers to be in country where to where you cannot export GDPR data to.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#204Earlier quoted context omitted.
So is it the same as Login with Facebook or Google? Google/Facebook/Clerk manages the GDPR (do you? that is 300% added value for a business) and the app can focus on the data? Is your main added value that you are not Facebook/Google?
GDPR and CCPA are important issues for this sort of 3rd party PII management stuff. I'd be _very_ hesitant to use this without some very strong guarantees that legal won't come breathing down my neck because I can't point them to a contractual guarantee that we will be complying with those (and similar rules from other jurisdictions). I lose enough sleep worrying about PII that I store in databases I manage. Farming…
If you don't mind me asking, What data do you store that you think is PII?
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#205I can immediately see how this would be useful for prototyping (and growing) a product! But it might be helpful to include a FAQ answering (at least) the following questions:
- Can user information be exported for clients who may want to build out their own solution later? If so, what does that story look like?
- Can account management pages be customized/styled to match the clients' branding?
- What parts, if any, of Clerk are open source? Do you have a github?
- Do free tier users have a grace period to upgrade/migrate if they exceed 5000 MAU, or is user access cut off until they upgrade?
- Where are you located, and are you targeting certain regions/countries for new hires?
Also, the tier pricing is a bit opaque.
The "professional" tier pricing appears to start at $49/month (for <= 1000 MAU) and scale to $4999 (for 100,000 MAU). The "enterprise" tier mentions a volume discount (which would suggest less than $0.05/MAU), but presumably the overall price increases? If that's not the case, why not allow clients to remain on the professional tier if they don't need features exclusive to the enterprise tier?
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#206Earlier quoted context omitted.
GDPR and CCPA are important issues for this sort of 3rd party PII management stuff. I'd be _very_ hesitant to use this without some very strong guarantees that legal won't come breathing down my neck because I can't point them to a contractual guarantee that we will be complying with those (and similar rules from other jurisdictions). I lose enough sleep worrying about PII that I store in databases I manage. Farming…
If you don't mind me asking, What data do you store that you think is PII?
- email address
- name
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#207So, first, congrats on launching your product. :) Personally, I don't have a need for it, and if I did, I'd be very reluctant to use a proprietary service, but I'm sure there are companies out there who will be happy to use you. Good luck! ------------ That said, maybe the HN community can answer something I've wondered about... Why isn't there an Open Source, standardized, self-hosted, version of this kind of servic…
I'm keeping a close eye on ory.sh - it's an open source auth as a service that plugs into k8s etc nicely as well.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#208Earlier quoted context omitted.
Another question, I don't see any mention of security. You are in complete control of our users/profiles and their login credentials and there is zero mention of how secure that data is.
Hi dubcanada, Thanks for your questions! It's good feedback that there's no security documentation up yet. We have a lot more content coming live in the next few weeks - but let me try to hit some of the most important points: * Session management is handled with secure, httpOnly cookies. We have you set a CNAME in production so we can set cookies in a first-party context (SameSite=Lax). * Cookies are scoped only to…
Your HIPAA status will be important for the increasing number of health related apps out there that would probably use a service like this.
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#209I can immediately see how this would be useful for prototyping (and growing) a product! But it might be helpful to include a FAQ answering (at least) the following questions: - Can user information be exported for clients who may want to build out their own solution later? If so, what does that story look like? - Can account management pages be customized/styled to match the clients' branding? - What parts, if any, o…
but also:
- Where are you located, and under what jurisdiction do you fall?
Re: Show HN: Clerk – all of user management as-a-service, not just authentication
#210So, first, congrats on launching your product. :) Personally, I don't have a need for it, and if I did, I'd be very reluctant to use a proprietary service, but I'm sure there are companies out there who will be happy to use you. Good luck! ------------ That said, maybe the HN community can answer something I've wondered about... Why isn't there an Open Source, standardized, self-hosted, version of this kind of servic…
I haven't tried it but https://www.keycloak.org/ (by redhat) seems close to what you describe.
keycloak is great, it's very flexible and fairly lightweight (all things considered).
it can get a bit complex, but to be fair the whole oauth/oauth2.0/openid/openid-connect/saml is quite messy in general.