News for hackers. Stuff that matters.
Re:Show HN: Hydra – Open-Source OAuth2 Server by manigandham on Monday July 01, 2019 @04:39PM (#20329511)
Bringing in a library is different from building it from scratch. Pretty much every language has solid OIDC frameworks now.

OIDC is great for greenfield and much better than writing user signin flow every time.

Re:Show HN: Hydra – Open-Source OAuth2 Server by vwpolo3 on Tuesday July 02, 2019 @04:10AM (#20333163)
Username + Password with a cookie store is much better understood and harder to get wrong than implementing a full OIDC suite (server + client). If you're talking federated login, that's what OIDC is for. If you're talking "login", your opinion is misguided.
Re:Show HN: Hydra – Open-Source OAuth2 Server by manigandham on Tuesday July 02, 2019 @06:23PM (#20339931)
We might not be talking about the same thing. The thread was comparing to other OAuth servers, and then libraries, but nobody is talking about implementing it from scratch.

That being said, if you're working on a greenfield app where you need auth, using an OAuth/OIDC server is much better and faster than creating yet another membership system for that app. That's a major advantage of identity federation.