News for hackers. Stuff that matters.

AllModules

Re:UserFront: Auth Without Complexity on Tuesday February 15, 2022 @01:44PM (#30350830)
We're hoping Q2 release, and we're dogfooding it now. Our dashboard will soon allow full navigation with a guest account, and we'll use those learnings to deliver a polished product. Guests get a JWT like any other user, but the token is denoted as being a guest, and your application can handle that however you like.
Re:UserFront: Auth Without Complexity on Tuesday February 15, 2022 @01:40PM (#30350773)
In short, it's a second-gen platform that doesn't have to support a bunch of legacy customers, so we can make it much less complex to use.

We started doing auth because our dev customers kept telling us how much of a pain it was with the first-gen companies (Auth0 et al). With Userfront, you don't have to learn all the standards/protocols or deal with browser quirks, and things like testing, access control, and multi-tenancy are first-class features instead of things you spend lots of time on.

Re:UserFront: Auth Without Complexity on Tuesday February 15, 2022 @09:44AM (#30347046)
Thanks for your feedback and agreed! We have a landing page overhaul on our short list.
Re:UserFront: Auth Without Complexity on Tuesday February 15, 2022 @09:43AM (#30347030)
Thanks! We have what you mentioned so will make it more accessible from the landing/guide/dashboard pages.

Yes you can do multi-tenancy natively, with each tenant having the same power as its parent in terms of roles, separate login pages, etc. Our architecture is "tenants all the way down".

Re:UserFront: Auth Without Complexity on Tuesday February 15, 2022 @09:37AM (#30346952)
> I'm not seeing anything about standards compliance

Thanks! We'll make a section to highlight them. We use the JWT standard (not sure if that is what you mean?), Oauth 2.0, SAML, etc... there are lots of standards in this space

Re:UserFront: Auth Without Complexity on Tuesday February 15, 2022 @09:33AM (#30346912)
> it should be trivial to rotate keys

This is exactly what we're rolling out in the next few weeks. We already have it trivial to rotate API keys [1], and we have a JWKS endpoint [2], so rotating the primary JWT private key is next on the list.

[1] https://userfront.com/docs/api.html#api-keys

[2] https://userfront.com/docs/api.html#json-web-key-set-jwks

Re:UserFront: Auth Without Complexity on Tuesday February 15, 2022 @09:28AM (#30346834)
Co-founder here. It's fun to see your work on the front page at 6am, and I guess I'll stop lurking now. I'm happy to try to answer any questions you may have.

Ask HN: Non-Business Books for Business?

I've read many of the popular business books. No doubt, there is a lot of great information in there. But sometimes I like to get a broader perspective since business isn't everything.Things like Meditations by Marcus Aurelius and even Fight Club have helped shape my world view and probably my view of running a startup.Are there any books you would recommend? Looking for "not business" books...

( Read More... | 1 comment | on HN )