Ask HN: What do you use to build auth?

Re:Ask HN: What do you use to build auth? by dewey on Wednesday June 29, 2022 @10:25AM (#31920575)

> Using a short-term JWT and bcrypt to salt passwords is like maybe 10 lines of code.

You are presenting an extremely limited scope.

What you get from using an authentication provider is things like verifying email addresses, OAuth where you just have to "enable" Google, Github, Apple login possibilities. Implementing all these flows yourself is a lot more than 10 lines of code.

Then you also have to do password reset flows, resent email confirmation emails etc.

[ Parent | on HN ]

Re:Ask HN: What do you use to build auth? by jaeming on Wednesday June 29, 2022 @05:53PM (#31926153)

Yes, that's why I said "the basics are really easy"? This was not meant to imply 10 lines of code handle the complete user experience workflow around auth. In saying that I have implemented oauth for multiple providers in not too much more lines of code. Maybe like 100.

[ Parent | on HN ]

Re:Ask HN: What do you use to build auth? by tppiotrowski on Wednesday June 29, 2022 @12:37PM (#31922511)

Also two-factor auth via email/SMS codes

[ Parent | on HN ]

Re:Ask HN: What do you use to build auth? by jaeming on Thursday June 30, 2022 @01:48AM (#31929040)

Two factor is actually pretty easily solved too though?

[ Parent | on HN ]

Re:Ask HN: What do you use to build auth? by dewey on Thursday June 30, 2022 @07:13AM (#31930979)

If authentication isn't your core business there's little reason to handle all these things yourself.

[ Parent | on HN ]

Re:Ask HN: What do you use to build auth? by x1xx on Wednesday June 29, 2022 @02:23PM (#31923877)

also password policies, account takeover detection/prevention, user device/session list management

[ Parent | on HN ]