News for hackers. Stuff that matters.
Re:Nobody Cares About OAuth or OpenID Connect by brokenwren on Wednesday January 23, 2019 @04:38PM (#18983307)
I'm surprised no one has mentioned FusionAuth (https://fusionauth.io). It's free, has a Python library, and the features that most apps need. There are a couple of people using Python with FusionAuth right now.

The community for FusionAuth is growing quickly and it has an open issue tracker (https://github.com/FusionAuth/fusionauth-issues), good docs (https://fusionauth.io/docs/v1/tech/), and many open source projects as well (https://github.com/FusionAuth).

I'm one of the developers of FusionAuth, so you should give it a try and lot us know what you think.

Re:Nobody Cares About OAuth or OpenID Connect by programd on Wednesday January 23, 2019 @07:10PM (#18984644)
I like what I see provided out of the box by FusionAuth, but I'm rather weary of the hard dependency on Elasticsearch.

I'm curious why the need for Elastic. You already have a database which can be used to search all the user objects. What does Elastic bring to the party other then an extra ops burden?

This is not necessarily a criticism, just trying to understand what went into that architectural decision.

Re:Nobody Cares About OAuth or OpenID Connect by brokenwren on Wednesday January 23, 2019 @07:56PM (#18984999)
Elastic provides a much more scalable and fast search for freeform user attributes. Using the databases search works in some cases but when you have freeform data (for example favoriteColor), it breaks down quickly.

While Elastic can be a bit cumbersome, we have made bundles that make it simpler to deploy and manage. We have also worked hard to secure it.

Re:Nobody Cares About OAuth or OpenID Connect by robotdan on Wednesday January 23, 2019 @04:51PM (#18983453)
Running FusionAuth in Docker or Kubernetes is a huge benefit to those running on premise.