Live data from Hacker News

Better Auth is joining Vercel

better-auth.com

21–30 of 95 posts

Re: Better Auth is joining Vercel

#21
post #3

can Vercel give any assurance that they won’t add a reliance on their closed-source cloud offering for the package? especially given their ownership of next-auth too i really loved better-auth’s DX but the nature of their database adapters means it’s relatively easy to switch over to another provider/library

[deleted]

Re: Better Auth is joining Vercel

#22
post #20

Ah, here we go again. Glad I decided to roll my own auth rather then using some library. I had a feeling that eventually they will join Vercel.

Yeah, we rolled our own auth as well. Everybody says you shouldn’t, it’s a risk, etc etc.

but to me that’s less risk than our auth getting bought by somebody whose business goals don’t necessarily align with mine.

Re: Better Auth is joining Vercel

#23
Bereket Here

the team at Vercel has been my biggest inspiration and always reflected many of the reasons we started working on Better Auth. This would allow us to focus more on what made better-auth great in the first place It hasn't even been 2 years since we started but thank you everyone from the open-source community for helping us make an impact in short amount of time. There is a lot to do to improve on open source auth and im really excited to be back focusing full time on building

Re: Better Auth is joining Vercel

#24
post #7

Reminder - KeyCloak was donated to CNCF so a safe choice https://www.keycloak.org https://www.cncf.io/blog/2023/04/11/keycloak-joins-cncf-as-a...

how is this related to better auth ? In my understanding, keycloak and better auth are fundamentally different. I would compare keycloak more with Ory for example.

[deleted]

Re: Better Auth is joining Vercel

#25
post #20

Ah, here we go again. Glad I decided to roll my own auth rather then using some library. I had a feeling that eventually they will join Vercel.

Yeah, we rolled our own auth as well. Everybody says you shouldn’t, it’s a risk, etc etc. but to me that’s less risk than our auth getting bought by somebody whose business goals don’t necessarily align with mine.

why not instead fork repo just in case but still use better auth until proven wrong? In case they go evil you just build from you forked one. At that point you would still have to either maintain your own auth or better auth fork.

With current AI your agents probably still will be better with maintaining a fork. Auth libs have pretty limited API surfaces comparing to e.g. ui frameworks.

Re: Better Auth is joining Vercel

#26

Auth is not hard to roll yourself. Crypto: don't do it. Auth? Easy peasy.

Unfortunately its a common misconception, it feels easy, however auth is a lot more harder to do it right, specially when it comes to recovery. A simple example, protocol like TOTP (time based OTP) uses the concept of shared secret and almost every implementation stores the secret as it is in their databases

Re: Better Auth is joining Vercel

#27
Congrats BetterAuth! It was the system I was considering before I rolled my own auth system around the passwordless concepts of: OTP + Passkeys + Google login. It is quite nice and simple and I've ported it to 3 separate projects now just via LLM:

Talk: https://ben3d.ca/blog/passwordless-login-system

Live Demo: https://passwordless.ben3d.ca

Demo Code: https://github.com/bhouston/passwordless

If you are building a user system with a database already, adding passwordless auth is easy.

Re: Better Auth is joining Vercel

#28
post #7

Reminder - KeyCloak was donated to CNCF so a safe choice https://www.keycloak.org https://www.cncf.io/blog/2023/04/11/keycloak-joins-cncf-as-a...

how is this related to better auth ? In my understanding, keycloak and better auth are fundamentally different. I would compare keycloak more with Ory for example.

Keycloak and Better Auth aren't as fundamentally different as you may think! Better auth supports authn/z, being an identity _source_, being an identity provider, being an OIDC/SSO provider (so others can login using better auth), rbac, SAML/SCIM, and a ton more. It's actually really powerful! Most folks found better auth as an alternative to next-auth/auth.js - but better auth does a lot more than those.

(some of those features are enterprise only)

Re: Better Auth is joining Vercel

#29
post #23

Bereket Here the team at Vercel has been my biggest inspiration and always reflected many of the reasons we started working on Better Auth. This would allow us to focus more on what made better-auth great in the first place It hasn't even been 2 years since we started but thank you everyone from the open-source community for helping us make an impact in short amount of time. There is a lot to do to improve on open so…

You're saying that BetterAuth will remain 100% free and open source, will continue to be maintained, and unlocked from Vercels ecosystem?
Post reply on HN