Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudlflare builds OAuth with Claude and publishes all the prompts

github.com

Post reply on HN
Print view View original

261–270 of 552 posts

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#261

Post by kentonv »

tveita wrote: post #258

Some examples of prompt exchanges that seem representative: https://claude-workerd-transcript.pages.dev/oauth-provider-t... ("Total cost: $6.45")! https://github.com/cloudflare/workers-oauth-provider/commit/... https://github.com/cloudflare/workers-oauth-provider/commit/... The first transcript includes the cost, would be interesting to know the ballpark of total Claude spend on this library so far. -- This is opport…

I didn't keep extract track but I'd estimate the total cost of Claude credits to build this library was somewhere around $50, which is pretty negligible compared to the time saved.

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#262

Post by ayuhito »

blibble wrote: post #259

> I thoughts LLMs were glorified Markov chain generators that didn't actually understand code and couldn't produce anything novel. so he's been convinced by it shitting out yet another javascript oauth library? this experiment proves nothing re: novelty

Good thing most of my tasks don’t require novelty, just working code.

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#263

Post by tkiolp4 »

paxys wrote: post #10

This is exactly the direction I expect AI-assisted coding to go in. Not software engineers being kicked out and some business person pressing a few buttons to have a fully functional app (as is playing out in a lot of fantasies on LinkedIn & X), but rather experienced engineers using AI to generate bits of code and then meticulously reviewing and testing them. The million dollar (perhaps literally) question is – coul…

Why is speed important in this context? If the code is published one week/month later, would that affect what exactly? It’s open source.

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#265

Post by abalone »

pphysch wrote: post #260
abalone wrote: post #251

Earlier quoted context omitted.

I like to make a rough analogy with autonomous vehicles. There's a leveling system from 1 (old school cruise control) to 5 (full automation): * We achieved Level 2 autonomy first, which requires you to fully supervise and retain control of the vehicle and expect mistakes at any moment. So kind of neat but also can get you in big trouble if you don't supervise properly. Some people like it, some people don't see it as…

That's a good analogy. OAuth libraries and integrations are like a highly-mapped California city. Just because you can drive a Waymo or coding agent there, doesn't mean you can drive it through the Rockies.

Note that even with OAuth it took, as of today, security engineers many iterations of review and prompt tweaking to get this result. We’re still in the “mapping” phase.

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#266

Post by tkiolp4 »

thewebguyd wrote: post #75
gokhan wrote: post #45

Earlier quoted context omitted.

> Not software engineers being kicked out ... but rather experienced engineers using AI to generate bits of code and then meticulously reviewing and testing them. But what if you only need 2 kentonv's instead of 20 at the end? Do you assume we'll find enough new tasks that will occupy the other 18? I think that's the question. And the author is implementing a fairly technical project in this case. How about routine L…

> But what if you only need 2 kentonv's instead of 20 at the end? Do you assume we'll find enough new tasks that will occupy the other 18? I think that's the question. This is likely where all this will end up. I have doubts that AI will replace all engineers, but I have no doubt in my mind that we'll certainly need a lot less engineers. A not so dissimilar thing happened in the sysadmin world (my career) when everyt…

I don’t think we would need less engineers… the work to be done will increase instead. Example: now it takes 10 engineers to release a product in 10 months without AI. With AI it takes lets say 1 engineer to release the same product in 1 month. What’s the company gonna do now? Release 10 products in 10 months without AI 10 engineers (each using AI).

It’s an exaggeration I know, but you get the point.

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#267

Post by kentonv »

blibble wrote: post #259

> I thoughts LLMs were glorified Markov chain generators that didn't actually understand code and couldn't produce anything novel. so he's been convinced by it shitting out yet another javascript oauth library? this experiment proves nothing re: novelty

While implementing the OAuth standard itself is not novel, many of the specific design details in this implementation are. I gave it a rather unusual API spec, an unusual storage schema, and an unusual end-to-end encryption scheme. It was totally able to understand these requests, even reasoning about the motivation behind them, and implement what I wanted. That's what convinced me.

BTW, the vast majority of JS OAuth libraries are implementing the client side of OAuth. Provider-side implementations are relatively rare, as historically it's mostly only big-name services that ever get to the point of being a OAuth providers, and they tend to build it all in-house and not release code.

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#268

Post by pessimizer »

bethekidyouwant wrote: post #252
prmph wrote: post #189

Earlier quoted context omitted.

This is one of the best comments about the current AI hype. The elite really don't see why the proletariat should be interested in, or enjoy the dignity of, actual skill and quality. Hence the enshitification of everything, and now AI promises to commoditize everything into slop. Sad because it is the very deoth of society that has birthe

This could be a comment about the industrial revolution.

The industrial revolution's immediate effect was to radically lower lifespans and lengthen working hours. After all of those people suffered and died, lifespans gradually got long again, although working hours never went back to normal.

You might think it was worth it now because you got an iphone, but they didn't get an iphone.

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#269

Post by felipeerias »

Workaccount2 wrote: post #212
cpursley wrote: post #204

Earlier quoted context omitted.

That’s one perspective, but it’s wrong and typical gatekeeping (do you have a software degree by any chance?). People had the same attitude towards open source tooling and low code frameworks - god forbid someone not certified and ordained build a solution in something other than Java... AI code tools are allowing people to build things they couldn't before due to lack of skillset, time or budget. I’ve seen all sorts…

>My brother for example built a thing with Microsoft copilot that helped automate more in his manufacturing facility (used to be paper). I have harped on this endlessly as a non-programmer working a non-tech job, with 7 "vibe-coded" programs now being used daily by people at my company. I am sorry, but the tech world is completely missing the forest for the trees here. LLM's are talked about purely as tools that were…

Devs have a hard time seeing vibe coding as UI, but that is what it effectively is for the average user. Describe the problem, get an interactive tool to handle it.

Re: Cloudlflare builds OAuth with Claude and publishes all the prompts

#270

Post by kentonv »

tkiolp4 wrote: post #263
paxys wrote: post #10

This is exactly the direction I expect AI-assisted coding to go in. Not software engineers being kicked out and some business person pressing a few buttons to have a fully functional app (as is playing out in a lot of fantasies on LinkedIn & X), but rather experienced engineers using AI to generate bits of code and then meticulously reviewing and testing them. The million dollar (perhaps literally) question is – coul…

Why is speed important in this context? If the code is published one week/month later, would that affect what exactly? It’s open source.

As it happens, if this were released a month later, it would have been a huge loss for us.

This OAuth library is a core component of the Workers Remote MCP framework, which we managed to ship the day before the Remote MCP standard dropped.

And because we were there and ready for customers right at the beginning, a whole lot of people ended up building their MCP servers on us, including some big names:

https://blog.cloudflare.com/mcp-demo-day/

(Also if I had spent a month on this instead of a few days, that would be a month I wasn't spending on other things, and I have kind of a lot to do...)

Post reply on HN