Re:Auth0 Down
by dualvectorfoil on Tuesday April 20, 2021 @12:09PM
(#26876571)
What alternatives to Auth0 are worth looking into? Between this P0 (with no ability to check the status or file a ticket) and the Okta acquisition, I hesitate to continue using Auth0 as the default when spinning up new web apps.
[ Parent
| on HN ]
What's the point of such services? Every web framework worth its salt supports all common authentication schemes and offers an easy interface to write your own.
The target customer is IT departments who want a simpler centralized way to manage access to all of these services for the employees in their org
Auth0 is/was more focused on external customers auth market, and not enterprise use cases.
If you're okay with self-hosting then keycloak or ory.sh seems like viable alternatives.
Re:Auth0 Down
by spacemanmatt on Tuesday April 20, 2021 @12:54PM
(#26877250)
I'm just getting into prod with keycloak. It's pretty amazing for free.
I dunno, Auth0 is still pretty stellar. Its not perfect, but the rate of disruptions isnt very significant IMO.
(famous last words)
Re:Auth0 Down
by thinkharderdev on Tuesday April 20, 2021 @05:43PM
(#26882179)
Keycloak is pretty battle-tested and rock solid although it is a bit of a behemoth operationally.
Outside of that they Ory ecosystem is really nice. We user Hydra, which is not a drop-in Oauth2 server but requires you to write several of the components yourself.
"Keycloak is pretty battle-tested and rock solid although it is a bit of a behemoth operationally."
Just looked. Java, Wildfly, Infinispan, Hibernate + A DB, network multicast if you want a cluster, your own separate load balancer, etc. So, a fairly large time investment if you aren't familiar with all of that.
Re:Auth0 Down
by thinkharderdev on Tuesday April 20, 2021 @06:29PM
(#26882736)
Yeah, it's not the easiest thing in the world to get up and running but not quite as hard as it might seem at first look. If you are already using k8s then you can use https://github.com/codecentric/helm-charts/tree/master/chart... to deploy Keycloak fairly easily. If you're not using k8s then it is probably more of an undertaking.
AWS Cognito works but it is a far cry from how usable Auth0 is.
Every year or so I check back in to see if Cognito has gotten any better. I hasn't. I'd love to use it, but some very basic things are just not done correctly. Yan Cui has a nice writeup on Cognito [0] that touches on some of its shortcomings.
[0]: https://theburningmonk.com/2021/03/the-case-for-and-against-...
Re:Auth0 Down
by StevePerkins on Tuesday April 20, 2021 @03:34PM
(#26880225)
My blood pressure is still coming back down from AWS having an all-day outage during a holiday week last year, because Kinesis had an issue and it turns out their entire infrastructure depends on that.
Agreed! just got done replacing Cognito across the board with Auth0, glad we hadn't pushed it to prod yet.
You can try Azure AD B2C.