crisopolis

Hi! I have a side project (that I haven't infiltrated with Claude Code yet, lol) that I need to dust off and get back to work on. It's essentially a B2B SaaS product where I needed to solve the usual suspects: multi-tenancy, SSO, RBAC, passkeys, sessions, and letting customers self-configure their IAM. Since it's a side project and I'm not paying for anything yet, I went ahead and integrated with WorkOS.

My project is built in Elixir, so I implemented the flows where my application has no login screen UI. I just push all unauthenticated users straight to WorkOS. WorkOS and their AuthKit (hosted login page) handles the heavy lifting (User/Pass, Passkey, MFA, SSO, etc) and sends them back to my application with a JWT. I check if the user exists, and if not, just-in-time provisioning kicks in on my side and we're done. Tenant identified, and tenant user authenticated all wrapped up in a single JWT.

Why WorkOS?

Simple... I don't want to be responsible for any authentication headaches. I don't want to self-host or duct tape a bunch of different components together. I'd rather put as much of that control in the client's hands (or WorkOS's if they don't have their own IAM). Plus, I like what WorkOS offers. Documentation is solid, though I still need to figure out their Fine Grained Authorization (FGA) product, formerly known as Warrant. In the end, nothing lives on my side except workos_tenant_id, workos_user_id, and my application data. The tenant has full control over their IAM, all the features of WorkOS via their own admin panel and ultimately who can access my SaaS application.

How's it going so far?

I have exactly zero customers except my development tenant. Everything works as expected so far. Maybe I'll have a different story when I get a customer willing to foot the bill for all the WorkOS bells and whistles in production. But implementation has been smooth, and AuthKit works great for dev/testing as a hosted login page, one-click testing SSO flows, etc.

If I had to re-implement, would I still choose WorkOS?

I probably would've done the same deep research you're doing, hoping to find that needle in a haystack. As a bootstrap developer, I'd try to avoid the paid options and figure out the open source/roll-your-own route. But if I had a plan to afford the paid ones, I'd probably evaluate WorkOS against other paid options properly.

Epic is a electronic health record (EHR) software used by many hospitals and clinics. It's not the only EHR there are many but it's probably the most known. Doctors usually type patient notes, diagnoses, prescriptions... everything goes in Epic and your team of providers can gain access to see that info.

I'm also in the process of building a product mostly in Elixir with minimal JavaScript. I just completed the WorkOS integration, now putting more effort into the actual product itself which is a extended workforce management SaaS.

What is your tech stack?

Backend: Phoenix Frontend: Phoenix LiveView Database: PostgreSQL (I want to use neon.tech soon for tenant db isolation) Auth: WorkOS (for B2B SSO) Cloud Provider: Fly.io (tbd)

Why did I choose this tech stack?

I've loved elixir for a few years but I've yet to build a functional SaaS with it yet. I've built one-off apps, and even stock algo bots. This time I'm going to try for something bigger which means I get to use Phoenix and LiveView to make a fast web app.

As for PostgreSQL we'll it's PostgreSQL and WorkOS seemed to be my biggest risk since I had no experience with it's platform or SSO OAuth2. However, WorkOS has tons of features that makes B2B SSO painless for me and potential customers. No real reason for fly.io yet.

Do you think your choices had any impact on your success or failure?

No success or failures yet.

Interesting, if they were going to provision a disposable vpn, couldn't they have done the same with the DNS.

Curious, your users like this design? Or is it a bit better once signed up?

Somethings do not work on mobile and while on desktop I was getting error pages clicking around. :-/

It still exists ello.co and I remember the same another FB/MySpace killer that didn't kill anything lol.

That site loads instantly on my mobile device over wifi. Is that fly.io only or do you use other caching services?

No, RadioShack brand is just being used for a trend. Not even related to keeping their technology or stores open/alive in 2022.

RIP RadioShack

Most likely Sonarr, Radarr they are library management and fetch apps.

Looks really close in design to Gleam.io's competition widgets they use.

Same with any other loan product the bank doesn't care if it's a scam, only cares about collecting that glorious interest payment or fees associated. Plenty of people buy bad used cars with loans that span over years and that used car may fail months after purchase. Guess who doesn't care... the loan provider/bank.

Still the point is Affirm was the wrong target for their chargeback and the OP should have contacted Affirm to potentially resolve the merchant not delivering the goods or a refund of the loan.

Merchant > Affirm > OP Bank

I agree it does read like the OP triggered the entire issue with payments using a chargeback originating from Chase, regardless of the support/platform issues with Affirm.

I don't believe charging back the loan provider had any outcome to getting their product/service.

Affirm was the wrong target.

This actually gave me an itch to make a web-based version... still pondering it.

This website is frustrating to use.

Wow, I use this same USB switch and also use two monitors for everything. Right now I manually switch my main monitor and just gave up on switching the monitor above it.

But this is friggin awesome.

Since I got in a lot of debt with credit in the past. I don't have much credit now and majority is being paid off. So my financial setup is rather simple, always slide the debit instead of the credit.

Charles Schwab is my main bank <3, broker and 401k investment holder (employer forced).

Local credit union finances my car loan (almost paid off), my secondary checking/savings and my only credit card.

CashApp for any type of sharing/transfer of funds.

YNAB does all the budgeting. (I've become better at spending money that I have!)

Yes, that chat bubble even the notification noise it makes drives me crazy.

Postgres is my fav. I've never heard of Svelte but just looked it up and might have to give it a whirl.

Anyways great information and great work on your MMO! If you ever need more Dev staff I'd love to help!

I love the UI, and how performant this game is for being JavaScript. What GFx engine does this use? Also timeline to getting to this Alpha? Years?

So pretty much NordVPN pokes TorGuard into suing and now... NordVPN gets to put TorGuard in a body bag and call it a day as they've always wanted. Mission Accomplished.

Location: St Petersburg, FL

Remote: Yes

Willing to relocate: Yes

Technologies: Elixir, Vue, JavaScript

Resume: http://chriscombs.me/resume/resume.pdf

Email: hey (at) chriscombs.me

skimfeed.com

So can't a private railroad company build new tracks? For instance we know that traffic is bound by a interstate highway to get from City A to City B. It clogs with traffic due to a aging bridge and losing lanes.

Can my railroad company, acquire all the land necessary to build a station on both sides and track between them and then start to fan out from there?

Besides the property owners who can stop me?

Elixir/Phoenix + ES6/Vue + Stripe + PostgreSQL + Vultr

At least it wasn't Oracle.

The company I work for still uses McAfee. This company has 50,000 employees.

Solo-developer on my side project...

* Frontend: Vue.js 2, JavaScript ECMA 2017

* Backend: Erlang/OTP 20, Elixir 1.6.3, Phoenix 1.3.2

* Persistence: Postgres 9.5.4.2

* Hosting: Vultr

Frontend, Backend, and DevOps Engineer (call it Fullstack, if you want...)

Location: Tampa, FL, USA

Remote: Yes (current disposition)

Willing to relocate: Yes

Technologies: Elixir, JavaScript (Node,Vue,Micro), ... but up to learning anything

Résumé/CV: http://chriscombs.me/resume/resume.html

Email: hey at chriscombs.me

Site: http://chriscombs.me/

My account at coinbase has been in a stuck status forever and I've contacted support. I never get any responses.

Not sure how they operate with horrid support.

Yeah, Florida SMLLC's aren't like other SMLLC's. Creditors don't have to give charging orders and single member's assets are up for grabs.

I'll probably also end up becoming a Florida S-Corp.