3 ms·

I guess what I'm asking -- Is simple username and password enough? Is just a "user" level and an "admin" level enough? I guess this is perhaps a bit app specif

• davelnewton 10y ago
  Nothing's a "given". No way to know if non-granular "user" and "admin" are sufficient. For a lot of apps they are. For many it's more of a "user of a group" and "admin of a group" which is still straight-forward. Granular authorization can be a challenge if it wasn't architected in at the beginning, but even then it just depends. In terms of authenticating against providers, who knows. For me, local auth, Google, FB, Twitter, and GH are more than enough, but your needs may vary.