News for hackers. Stuff that matters.
Re:How We Built Airbnb Holiday Cards in Five Days by mbrock on Wednesday January 23, 2013 @02:35AM (#5101998)
I'm curious about how exactly to go about extricating authentication, but I'm not sure where to look. Any pointers for best practices or cool patterns for this?
Re:How We Built Airbnb Holiday Cards in Five Days by mrgordon on Wednesday January 23, 2013 @07:22AM (#5102708)
We have a single sign-on (Rails) application along with a client library that other apps use to integrate with it (which provides helpers for checking for accounts and roles as well as rspec helpers for writing tests that involve logging in without retesting the login/signup flow)
Re:How We Built Airbnb Holiday Cards in Five Days by mbrock on Friday January 25, 2013 @03:23AM (#5114573)
Ah, ok. Do you think it would work okay with a distributed setup, with different apps on different servers, and so on? I'm imagining lots of RPC calls just for authorization. (Like, if the apps do defensive role checking.)