3 ms·
Ask HN: What are some good resources and patterns for authentication?
The oauth guide[0] is incomplete and outdated but helpful. Auth0 has a lot of good information and stackoverflow does as well, although a bit balkanized.
Do you have resources or design patterns for authentication that provide a conceptual walkthrough of the components. Not the implementation, but the design & possibly routing diagrams of:
* creating a new user & account routing & login
* confirming email and moving user from temp to verified account
* transactional email & alerting user of sign ins as well as password updates.
* 2fa
Scotch.io has a pretty good guide I looked at a few years ago. It is great for a beginner side project, but most guides seem at that level. Get password, use bcrypt, verify, send token/cookie.
[0]https://www.owasp.org/index.php/Guide_to_Authentication
- niftich 10y agoThe best (in terms of 'best effort') masterpost on this is at https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication https://stackoverflow.com/questions/549/the-definitive-guide... It's also a perpetual work-in-progress, but that's both my necessity and design.