News for hackers. Stuff that matters.
Re:How Open ID Connect Works by mooreds on Thursday January 04, 2024 @07:25PM (#38874125)
I'd advocate that the right "simple" solution is a platform/framework specific auth solution (as I wrote here: https://news.ycombinator.com/item?id=38872704 ).

Those handle a lot of the simple use cases and some of the complex ones. They have the virtue of being well-tested and integrated with your development platform. You can deploy in one step and maintain one database. Which is great till it isn't.

What platform libraries like Devise, etc, don't offer is user data denormalization and isolation, which is useful when you have 2 or more applications with users. Then you want to look at auth servers (self-hosted or SaaS).

But you want the auth server experience to be as simple as possible, which is what we're working towards.

My two cents.

There are no comments on this comment yet.