Learn Authentication the Hard Way: Part Three • Hacker News Board

Re: Learn Authentication the Hard Way: Part Three

#11

Post by hnzix » Thu, Feb 20, 2020, 4:23 AM UTC

vonseel wrote: post #9

pravins wrote: post #8

Earlier quoted context omitted.

I'm not sure what your exact use case is, but if you need to connect to oauth-based APIs have you tried https://pipedream.com ? It's a free developer tool that provides managed auth (including oauth token generation and refresh) for 100+ apps with an easy way to orchestrate those APIs in Node.js workflows. I wrote a short blog post at https://dev.to/pipedream/use-any-api-in-seconds-with-auth-ma... . I hope that's hel…

Imagine trying to convince management to use a tool named Pipedream, sheesh, couldn’t think of a worse name.

I always liked telling mgmt about our product's use of FckEditor.

Re: Learn Authentication the Hard Way: Part Three

#12

Post by greyskull » Thu, Feb 20, 2020, 4:24 AM UTC

hpoe wrote: post #2

I am currently an IAM engineer and can I just throw out there how much I hate OAuth/OIDC, I work at a large org and have to integrate with dozens of different vendors and applications and not a single one has the same way of doing OAuth because to quote the spec, wait it isn't a spec it is a "framework" we have to remember that, under interoperability it says > OAuth 2.0 provides a rich authorization framework with w…

Keep an eye on https://openid.net/wg/fastfed/

> it seems like the entire identity space is a clusterfck

Yeah, especially server identity in a many-service world.

Re: Learn Authentication the Hard Way: Part Three

#13

Post by enraged_camel » Thu, Feb 20, 2020, 5:45 AM UTC

vonseel wrote: post #9

pravins wrote: post #8

Earlier quoted context omitted.

I'm not sure what your exact use case is, but if you need to connect to oauth-based APIs have you tried https://pipedream.com ? It's a free developer tool that provides managed auth (including oauth token generation and refresh) for 100+ apps with an easy way to orchestrate those APIs in Node.js workflows. I wrote a short blog post at https://dev.to/pipedream/use-any-api-in-seconds-with-auth-ma... . I hope that's hel…

Imagine trying to convince management to use a tool named Pipedream, sheesh, couldn’t think of a worse name.

If you find yourself in a company where management cares about the name of a tool developers are using to get the job done, I strongly encourage you to find a better gig.

Re: Learn Authentication the Hard Way: Part Three

#14

Post by pravins » Thu, Feb 20, 2020, 6:38 AM UTC

vonseel wrote: post #9

pravins wrote: post #8

Earlier quoted context omitted.

I'm not sure what your exact use case is, but if you need to connect to oauth-based APIs have you tried https://pipedream.com ? It's a free developer tool that provides managed auth (including oauth token generation and refresh) for 100+ apps with an easy way to orchestrate those APIs in Node.js workflows. I wrote a short blog post at https://dev.to/pipedream/use-any-api-in-seconds-with-auth-ma... . I hope that's hel…

Imagine trying to convince management to use a tool named Pipedream, sheesh, couldn’t think of a worse name.

I appreciate the feedback! Luckily, that hasn’t been an issue and our users tell us they love the name :) Based on my experience, if management is focused on driving business value, then the name of a product or service isn’t really a factor. What matters is the value their teams and business get. And that’s what we’re focused on delivering to our users.

Re: Learn Authentication the Hard Way: Part Three

#15

Post by vonseel » Thu, Feb 20, 2020, 11:22 AM UTC

enraged_camel wrote: post #13

vonseel wrote: post #9

Earlier quoted context omitted.

Imagine trying to convince management to use a tool named Pipedream, sheesh, couldn’t think of a worse name.

If you find yourself in a company where management cares about the name of a tool developers are using to get the job done, I strongly encourage you to find a better gig.

Yeah, on second thought, I agree with you, but now I can’t remember what Pipedream is even used for, so I guess that’s a different complaint I have about it. But most software doesn’t have a name that indicates exactly what it is, anyways, maybe it doesn’t matter. Sometimes they indicate (Word, Photoshop, GarageBand, Internet Explorer), sometimes they don’t (kubernetes, Logic, Chrome).