Re:Nobody Cares About OAuth or OpenID Connect
by programd on Wednesday January 23, 2019 @07:10PM
(#18984644)
I like what I see provided out of the box by FusionAuth, but I'm rather weary of the hard dependency on Elasticsearch.
I'm curious why the need for Elastic. You already have a database which can be used to search all the user objects. What does Elastic bring to the party other then an extra ops burden?
This is not necessarily a criticism, just trying to understand what went into that architectural decision.
Re:Nobody Cares About OAuth or OpenID Connect
by brokenwren on Wednesday January 23, 2019 @07:56PM
(#18984999)
Elastic provides a much more scalable and fast search for freeform user attributes. Using the databases search works in some cases but when you have freeform data (for example favoriteColor), it breaks down quickly.
While Elastic can be a bit cumbersome, we have made bundles that make it simpler to deploy and manage. We have also worked hard to secure it.
The community for FusionAuth is growing quickly and it has an open issue tracker (https://github.com/FusionAuth/fusionauth-issues), good docs (https://fusionauth.io/docs/v1/tech/), and many open source projects as well (https://github.com/FusionAuth).
I'm one of the developers of FusionAuth, so you should give it a try and lot us know what you think.