What auth do you use? Why?

Re:What auth do you use? Why? by Lacerda69 on Thursday May 11, 2023 @02:22AM (#35898391)

For anything serious password + WebAuthn MFA with Ory Kratos. It lets me choose any method really, can be self-hosted or used as SaaS.

IMO it's almost always good to offer some OIDC social login, just depends what provider your users use.

- https://github.com/ory/kratos

[ Parent | on HN ]

Re:What auth do you use? Why? by CGamble26 on Thursday May 11, 2023 @09:52PM (#35910914)

This may be a dumb question but, why couldn’t applications just use Webauthn? Why add passwords?

[ Parent | on HN ]

Re:What auth do you use? Why? by vdelitz on Friday May 12, 2023 @09:25AM (#35915911)

The only reason probably if some accounts already have a password and you want to support it. If you're building a new app, I'd also go for WebAuthn / passkeys-only and use some other passwordless method (e.g. social login/OIDC or email magic links as fallbacks)

[ Parent | on HN ]

Re:What auth do you use? Why? by CGamble26 on Sunday May 14, 2023 @12:02PM (#35938947)

Ok understood, thank you very much!

[ Parent | on HN ]