Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Open-source OAuth service for 40+ APIs

nango.dev

Post reply on HN
Print view View original

11–20 of 60 posts

Re: Show HN: Open-source OAuth service for 40+ APIs

#11

Post by bastienbeurier »

sirius87 wrote: post #8

Looks very slick! Wonderful landing page. Congrats. > But the worst part is that (almost) every API has quirks and non-standard behaviour. This is my long-standing pet-peeve with identity providers (idP). Everyone goes ahead and does their own thing, especially when it comes fetching user profiles (by having APIs in addition to a standard OAuth userinfo endpoint) and performing "federated logout" (you want to termina…

Thank you for your support!

The part we focus on (for now) is getting access to all endpoints of external APIs, on behalf of users, so you can enrich your product with integrations.

This involves 1. getting users to login to external systems, from inside your app 2. storing/refreshing access tokens so you can access all endpoints of external APIs

This means we're less focus on the Single Sign-On use-case for now!

Re: Show HN: Open-source OAuth service for 40+ APIs

#12

Post by 9dev »

This certainly looks polished, but... What use case do you have for working on the token generation code so often that it warrants such a big layer of indirection?

I don't quite understand how all the fuss around different OAuth implementations is justified, especially not why you would need a separate library or SaaS for that. Implementing the client_credentials dance is like, get a token, cache token+refresh until expiration time, use until expired, exchange the refresh token, back to start. I mean yes, some providers want an extra parameter or have a strange token URL, but once you've grokked the general concept, it usually makes sense.

Re: Show HN: Open-source OAuth service for 40+ APIs

#13

Post by jamesmcintyre »

As soon as I saw this I planned on asking in the comments how it compares to Pizzly, great to see that this already awesome project is getting relaunched as a dedicated, OSS startup!

Also, last time I checked out pizzly I do not remember seeing any of the "sync" type functionality and the fact that you've added that recently with Temporal is awesome!

You guys are awesome for putting open-source as a high priority!

Is nango going to have the proxy server functionality? (Also, would be really cool if you had a way to deploy the proxy to "the edge" via cloudflare/deno-deploy/fly.io!)

Best of luck to the nango team!

Re: Show HN: Open-source OAuth service for 40+ APIs

#15

Post by [deleted] »

9dev wrote: post #12

This certainly looks polished, but... What use case do you have for working on the token generation code so often that it warrants such a big layer of indirection? I don't quite understand how all the fuss around different OAuth implementations is justified, especially not why you would need a separate library or SaaS for that. Implementing the client_credentials dance is like, get a token, cache token+refresh until…

[deleted]

Re: Show HN: Open-source OAuth service for 40+ APIs

#16

Post by tkanarsky »

9dev wrote: post #12

This certainly looks polished, but... What use case do you have for working on the token generation code so often that it warrants such a big layer of indirection? I don't quite understand how all the fuss around different OAuth implementations is justified, especially not why you would need a separate library or SaaS for that. Implementing the client_credentials dance is like, get a token, cache token+refresh until…

I think it's pretty great for hackathons and other situations when you need to crank out an MVP without worrying about the authorization flow logic too much. Of course, once you have the bandwidth to make a proper backend you can graduate to your own OAuth logic

Re: Show HN: Open-source OAuth service for 40+ APIs

#17

Post by rangledangle »

jamesmcintyre wrote: post #13

As soon as I saw this I planned on asking in the comments how it compares to Pizzly, great to see that this already awesome project is getting relaunched as a dedicated, OSS startup! Also, last time I checked out pizzly I do not remember seeing any of the "sync" type functionality and the fact that you've added that recently with Temporal is awesome! You guys are awesome for putting open-source as a high priority! Is…

Nango is Pizzly.

Re: Show HN: Open-source OAuth service for 40+ APIs

#19

Post by rguldener »

saulrh wrote: post #18

Fairly neat! Quick docs-bug report: "And _easy to add yours_." under the "40+ pre-built providers" heading on the homepage goes to a 404 in the documentation ( https://docs.nango.dev/pizzly/contribute-api ).

Uups good catch, thanks! Fixed, the correct link is: https://docs.nango.dev/contribute-api

Re: Show HN: Open-source OAuth service for 40+ APIs

#20

Post by rguldener »

jamesmcintyre wrote: post #13

As soon as I saw this I planned on asking in the comments how it compares to Pizzly, great to see that this already awesome project is getting relaunched as a dedicated, OSS startup! Also, last time I checked out pizzly I do not remember seeing any of the "sync" type functionality and the fact that you've added that recently with Temporal is awesome! You guys are awesome for putting open-source as a high priority! Is…

Thanks for the kind words!

Yes we are thinking about bringing the proxy back as well. Probably with some added features, such as rate-limit handling and automatic retries (powered by Temporal).

The proxy edge deployment idea is interesting. Would you be calling it directly from your frontend/mobile code? We were thinking most people would want to have the proxy as close to their backend as possible, but maybe we are missing something?

Post reply on HN