Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Auth is a solved problem by minds much smarter than my own.

Is it? It seems like all the outsourced auth has lots and lots and lots of problems, issues, etc. along with being remarkably expensive.

I'm not saying I, personally, can do better, but it seems like auth is far from a solved problem. Especially since it seems like the difficult part of "auth" is actually "customer support" rather than any technical issue.

(I would argue that the lack of an open-source "Auth in a Box" seems to also argue that auth is far from "solved".)



There are many open source "auth in a box" projects that you can self-host, such as Ory (https://github.com/ory/), Zitadel, Keycloak, and many other small projects. They all have small differences but for small to mid scale projects its definitely manageable.


I was talking about third party libraries (library code), not providers (okta)


The evil in the details:

Spring Security is complex and brittle, I have seen a push to use underlying libraries e.g. nimbus in real-life projects.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: