101–110 of 259 posts
Tom's articles are always a good read. Anyone remember Auth0 and passportjs? The churn of auth services is never ending, but I suppose so are the standards.
Heya, Auth0 is still around! They got bought by Okta in 2021 but still have a free tier and we see them in a lot of bake-offs.
Earlier quoted context omitted.
> And even more users who are looking to escape. Uhm, companies like Replit and several other large startups are actually adopting Clerk. I guess if your world mainly revolves around X (formerly Twitter), it can seem like everyone is moving away from Clerk. Also, Better Auth’s X presence is pretty much centered around criticizing every auth provider out there, so the discourse there tends to skew heavily negative.
Clerk looks _really_ good initially. It's perfect if you want to prototype something and not care about auth. It's only when you start getting into the details that you begin to suffer. For example, there's _still_ no way to do offline auth on mobile. So that your application could be opened if there's no connectivity at the moment. But hey, you can do the Metamask Web3 blockchain thingie! I have never used Twitter/X…
Does Better Auth offer this? Or any other auth libraries or solutions? I haven't heard of any, but haven't done an intensive look either.
I suppose you could do something with a cached JWT or cached password hash (though sending a password hash to a mobile client spooks me).
I'm in the space and interested in learning more.
in rails I just authentication-zero. no need for 3rd party provider.
Using Clerk, quite unhappy with it. No proper RBAC (roles are tied to organizations, not stored on user itself, so you cannot have a concept of global admin or something like that, unless you use metadata for storing arbitrary key value paris), and more than once in the past weeks/months it had a downtime causing the whole app to fail. Would think twice before using it in the future.
thankfully i'm familiar with better auth from a side project, but migrating SSO/SCIM sounds like it might be a bit of a pain
Has anyone used Keycloak for actual production? I have often thought about it but I stick to Auth0 just because I don't know if Keycloak has a good track record?
I was at KubeCon EU this year (representing my employer, FusionAuth) and there were lots of folks who were running Keycloak who came and chatted with us.
It's a different set of tradeoffs than Auth0 or other SaaS services. More control, but more responsibility too.
0: https://events.linuxfoundation.org/kubecon-cloudnativecon-eu...
Can someone more intelligent then me tell me why should I offload my postgres users table to some 3rd party provider? Like what is so hard about keeping that table in my VM on hetzner that I have to give it off to someone else? It's not payments, it's just a few fields of data
Start any greenfield project, hand-coded auth takes up 50% of the development time of the entire MVP
Earlier quoted context omitted.
"home built auth system" is bound to have "random SSO issues". You fix them, that's how things mature.
I'm guessing they simply didnt want to spend the time and money doing that
The homepage of val.town says "Zapier for know-code engineers".. Is KNOW -code engineer a term?
It's just a play on the phrase "no code". Maybe you can help me out: I still have no idea what val.town is. I guess it's an alternative to Cloudflare Workers?
So yes, like Cloudflare Workers in some ways. Or like CodePen but fullstack. Or Replit. The val town "founding poem" was:
> If GitHub Gists could run,
> And AWS Lambda were fun
The homepage of val.town says "Zapier for know-code engineers".. Is KNOW -code engineer a term?
It's just a play on the phrase "no code". Maybe you can help me out: I still have no idea what val.town is. I guess it's an alternative to Cloudflare Workers?
Earlier quoted context omitted.
Clerk looks _really_ good initially. It's perfect if you want to prototype something and not care about auth. It's only when you start getting into the details that you begin to suffer. For example, there's _still_ no way to do offline auth on mobile. So that your application could be opened if there's no connectivity at the moment. But hey, you can do the Metamask Web3 blockchain thingie! I have never used Twitter/X…
> offline auth on mobile Does Better Auth offer this? Or any other auth libraries or solutions? I haven't heard of any, but haven't done an intensive look either. I suppose you could do something with a cached JWT or cached password hash (though sending a password hash to a mobile client spooks me). I'm in the space and interested in learning more.
This is supported by Better Auth out-of-the box. It doesn't hide these kinds of stuff from you.