Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Sick of spending time on Auth, we built an open source 'Stripe for Auth'

news.ycombinator.com

Post reply on HN
Print view View original

341–347 of 347 posts

Re: Sick of spending time on Auth, we built an open source 'Stripe for Auth'

#341

Post by rishabhpoddar »

Osiris wrote: post #204

I looked around on the site and couldn't find any explanation about how it works, a diagram of the auth flow, or even a gif showing how the flow works.

One important point is that we do not follow the OAuth 2.0 protocol since for simple email password login without SSO, we do not need to provide OAuth.

So the login part, is a simple API call with the email / password. On success, a session is created, and the flow for that is provided here (in a diagram): https://supertokens.io/docs/emailpassword/common-customizati...

Re: Sick of spending time on Auth, we built an open source 'Stripe for Auth'

#342

Post by advaitruia »

ecmascript wrote: post #307

This looks very cool and I could use it but I would be more happy for an EU version of this where I can simply pay you for hosting it for me, at least until I know my app or project is successful. I think there is a room for a Plausible version of auth. I think it's good that you offer to self-host it but honestly that is a bit of work as well. I use a js-only backend so installing Java as a dependency maybe isn't th…

You wouldnt need to install your own JDK. We package it all nicely in a docker container so you do not have to worry about it. This makes running SuperTokens just like running any other http microservice.

But yes, your point is valid. If you'd like to be able to know the intimate details and make modifications (that we dont offer), then this would hold true. But all in all, the reasons we picked java were:

Java has a very mature ecosystem. This implies that third party libraries have been battled tested. It's strong type system ensures fewer bugs and easier maintainability. This is especially important when many people are expected to work on the same project (for open source).

Re: Sick of spending time on Auth, we built an open source 'Stripe for Auth'

#343

Post by advaitruia »

lmeyerov wrote: post #143

Getting Django would be amazing, speaking as a user for whom Keycloak was interesting except not trusting IBM/RedHat as safe & responsible stewards. And we're exactly in that market of 'we want the OSS + on-prem friendly variant for our on-prem users, but a managed service provider for our managed tier.' Auth0 and friends show how big this market is, and the general push to SaaS-only by them and their competitors has…

We plan on adding Django support asap. If you could share your email ID or drop me an email at advait at supertokens.io - I will update you as soon as we have the Django SDK ready

Re: Sick of spending time on Auth, we built an open source 'Stripe for Auth'

#345

Post by advaitruia »

inssein wrote: post #91

> A great alternative to Auth0, Firebase Auth and AWS Cognito Can you elaborate a bit on how it's a great alternative, or what is different?

1. Neither of these are open source. Also, the only option that can be run on premise

2. We take a modular approach to our architecture. This enables developers to choose only the features SuperTokens they need for their use case. They need not worry about complications associated with other features (eg: SSO and OAuth if you don’t need it) and this in turn makes it easier to implement and manage SuperTokens. This is not true for the others. Regardless of your use case, you likely have to worry about Oauth flows and integrating with a '3rd party' app.

3. Heavy focus on keeping documentation simple and easy to understand. We want to 'just work' for you. We spend a significant amount of our effort on simplifying every step of implementation (this is ongoing and iterative). we've often had complaints from auth0 and cognito users for this.

4. Pricing (compared to Auth0 atleast)

Re: Sick of spending time on Auth, we built an open source 'Stripe for Auth'

#346

Post by ecmascript »

advaitruia wrote: post #342
ecmascript wrote: post #307

This looks very cool and I could use it but I would be more happy for an EU version of this where I can simply pay you for hosting it for me, at least until I know my app or project is successful. I think there is a room for a Plausible version of auth. I think it's good that you offer to self-host it but honestly that is a bit of work as well. I use a js-only backend so installing Java as a dependency maybe isn't th…

You wouldnt need to install your own JDK. We package it all nicely in a docker container so you do not have to worry about it. This makes running SuperTokens just like running any other http microservice. But yes, your point is valid. If you'd like to be able to know the intimate details and make modifications (that we dont offer), then this would hold true. But all in all, the reasons we picked java were: Java has a…

Well, I don't really use docker for my own stuff so installing it to simply use a third party application seems harder than simply installing the software required.

I am not questioning your choice of language. It's all fine and dandy I am just questioning myself and if I have enough willpower to actually host it myself. :)

Re: Sick of spending time on Auth, we built an open source 'Stripe for Auth'

#347

Post by resthedev »

This is awesome! And it couldn't have come at a better time. I've been working on my own startup product and shopping around authentication platforms. Auth0 looks great but it's just damn expensive when you start getting more users. Appreciate this!
Post reply on HN