Ask HN: Whats a Build vs. Buy decision that you got wrong?

Re:Ask HN: Whats a Build vs. Buy decision that you got wrong? by giaour on Wednesday December 28, 2022 @01:51PM (#34164314)

Authentication is (usually) not that complex, but identity and authorization are. I've seen plenty of institutional regret when each application has its own pool of users and an internal authZ system.

[ Parent | on HN ]

Re:Ask HN: Whats a Build vs. Buy decision that you got wrong? by gneray on Wednesday December 28, 2022 @02:42PM (#34164975)

Authorization is one of these areas that has traditionally been viewed as too hard to extract from the application, but it's core to no one's business and in recent years lots of companies have started to use authorization products. I'd chalk this up to:

1) Better abstractions for disentangling authorization

2) Better technical literature on the subject [1][2]

3) Increasing comfort with third-party infra services (RDS, LaunchDarkly, etc.)

Note: I'm cofounder of an authorization-as-a-service company (Oso) [3]

[1] https://www.osohq.com/academy

[2] https://research.google/pubs/pub48190/

[3] https://www.osohq.com/

[ Parent | on HN ]