Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Clerk – all of user management as-a-service, not just authentication

clerk.dev

Post reply on HN
Print view View original

91–100 of 234 posts

Re: Show HN: Clerk – all of user management as-a-service, not just authentication

#91

Post by laurent92 »

colinclerk wrote: post #2

Hi HN - We couldn't be more excited to launch Clerk and help developers solve all of user management. It's been quite a journey to reach this point, with over a year of iteration on the developer experience before we found something developers love. Using Clerk will enable you to spend more time on your application, and less time worrying about the ever-growing list of user management concerns. Our team is listening…

So is it the same as Login with Facebook or Google? Google/Facebook/Clerk manages the GDPR (do you? that is 300% added value for a business) and the app can focus on the data?

Is your main added value that you are not Facebook/Google?

Re: Show HN: Clerk – all of user management as-a-service, not just authentication

#92

Post by bpicolo »

colinclerk wrote: post #16
dubcanada wrote: post #5

Earlier quoted context omitted.

Another question, I don't see any mention of security. You are in complete control of our users/profiles and their login credentials and there is zero mention of how secure that data is.

Hi dubcanada, Thanks for your questions! It's good feedback that there's no security documentation up yet. We have a lot more content coming live in the next few weeks - but let me try to hit some of the most important points: * Session management is handled with secure, httpOnly cookies. We have you set a CNAME in production so we can set cookies in a first-party context (SameSite=Lax). * Cookies are scoped only to…

Glad you chose cookies for this versus localstorage JWT tokens. Kudos for that.

Re: Show HN: Clerk – all of user management as-a-service, not just authentication

#93

Post by dsr_ »

tootie wrote: post #26
taytus wrote: post #11

Earlier quoted context omitted.

This is my question as well. It's an honest question and hopefully someone can educate me. Why would anyone trust a third party with what is the most important asset, their users? Thank you in advance.

I can answer with the opposite question. Why would you trust your homemade solution instead of heavily invested experts? Auth0 (and Okta and a thousand others) do nothing but auth and customer management and do it at 1000X the scale as most enterprises. They do it way better than your IT team could possibly do it. And support every cutting edge feature and potential use case. You can also get them to absorb indemnity…

If UnicornAuthorization manages ten billion credentials, one breach could kill the company... and severely wound every single customer.

If JaneService manages ten thousand credentials and has a breach, it could put JaneService out of business, but it won't affect MonicaSoft.

Re: Show HN: Clerk – all of user management as-a-service, not just authentication

#95

Post by ignoramous »

rexreed wrote: post #66

The pricing model has me confused: 1) Pricing is free up to 5,000 MAU 2) But the next pricing grade starts at 1,000 MAU for $49/mo + $0.05/MAU additional so if you have 5,001 MAU you take a big leap from $0 to $249/mo Is there a reason for that huge bump? Why doesn't the first pay tier start at 5,000 MAU? And how is MAU even calculated? Like, aren't all users in the system active users? Or are you able to have a bunc…

I feel the same: The upper tier pricing is a bit aggressive even if free 5000 MAUs is a good "hook" (more than sufficient for most upstarts).

I've been meaning to evaluate keycloak.org and userbase.com, two radically different open source user management layers. Especially, userbase which has a relatively more attractive pricing for their hosted option.

Besides, user management is something I'd like to rid if I can, and instead rely on anonymous / decoupled (passwordless?) identity layers like human-id.org and gazepass.com

Cloudflare's OPAQUE is another enticing (zero-password) tangent in all of this, but they warn folks to not build identity systems using it, yet.

Re: Show HN: Clerk – all of user management as-a-service, not just authentication

#96

Post by colinclerk »

rexreed wrote: post #66

The pricing model has me confused: 1) Pricing is free up to 5,000 MAU 2) But the next pricing grade starts at 1,000 MAU for $49/mo + $0.05/MAU additional so if you have 5,001 MAU you take a big leap from $0 to $249/mo Is there a reason for that huge bump? Why doesn't the first pay tier start at 5,000 MAU? And how is MAU even calculated? Like, aren't all users in the system active users? Or are you able to have a bunc…

Hey all - looks like there's a lot of confusion on the pricing model here. That's our fault, sorry!

The free plan does not include 2-step verification, and that was the reason for the increase in the paid plan.

We'd love some feedback on how you'd like to see the free plan constructed. What would be most helpful for getting you started with Clerk?

Re: Show HN: Clerk – all of user management as-a-service, not just authentication

#97

Post by gravypod »

colinclerk wrote: post #2

Hi HN - We couldn't be more excited to launch Clerk and help developers solve all of user management. It's been quite a journey to reach this point, with over a year of iteration on the developer experience before we found something developers love. Using Clerk will enable you to spend more time on your application, and less time worrying about the ever-growing list of user management concerns. Our team is listening…

Seems like an amazing product! One thing that would be amazing for you to tackle is support for devices, services, etc. Things that are not driven by a user and do not have a browser. I've worked at a few IoT companies and authentication is always a massive pain in my ass. SSO for web pages is annoying, authentication for 3rd party APIs or devices that need to sit in the middle of nowhere and don't have people to "login" on them is a whole other layer of pain. I'd love if you had a solution in that area.

Re: Show HN: Clerk – all of user management as-a-service, not just authentication

#99

Post by SahAssar »

I'm probably not the main audience for this, but if you mention security as a top-level feature it might be good to fix these:

https://securityheaders.com/?q=https%3A%2F%2Fclerk.dev https://securityheaders.com/?q=https%3A%2F%2Fdashboard.clerk...

For me it is also a red flag to include third party CDN JS (especially without SRI) on security critical applications (like the login for the dashboard and customer logins do with jsdelivr).

Re: Show HN: Clerk – all of user management as-a-service, not just authentication

#100

Post by rnotaro »

rexreed wrote: post #66

The pricing model has me confused: 1) Pricing is free up to 5,000 MAU 2) But the next pricing grade starts at 1,000 MAU for $49/mo + $0.05/MAU additional so if you have 5,001 MAU you take a big leap from $0 to $249/mo Is there a reason for that huge bump? Why doesn't the first pay tier start at 5,000 MAU? And how is MAU even calculated? Like, aren't all users in the system active users? Or are you able to have a bunc…

I guess the pricing is more feature-based than MAU based.

The professional pricing have "Two-step verification" and "No visible Clerk branding".

Post reply on HN