3 ms·

Is it really that hard to provide an email based login?

dickeytk 8y ago
ask for a refund
biggerfisch 8y ago
I mean, it is additional work. Not only do you need to store the emails/passwords securely, which while it isn't _that_ hard, it is a needed consideration, but you also need to now: - provide a password reset service - find a way to send emails to this many people for low cost, it is a free service after all, so all of the confirmation/reset emails are an additional cost - etc
- lucasverra 8y ago
  on the cost side (not counting gdpr), back4app (parse server plateform [1] as a service) provide all of that from scratch. disclaimer : just a paying client here. [1]: https://www.back4app.com/product/what-is-parse-server https://www.back4app.com/product/what-is-parse-server
- jaaames 8y ago
  Firebase has ergonomic free auth that does all this out of the box.
znpy 8y ago
It would be cool if auth0 (https://auth0.com/ https://auth0.com/) would offer free usage of their service, given the fact that they would only use basic features.
acheron 8y ago
What I wonder is why can't I just create an arbitrary username unlinked to email or anything else? This isn't a bank account we're talking about. Oh right, because they're probably gathering personal information, which is why they want access to my Google or other accounts. I guess since they appear to have a "reddit" auth option and I think reddit still lets you create arbitrary usernames, that would be a two step process to do it.
- dickeytk 8y ago
  that's such a baseless accusation. I think it's more likely Eric just wanted to spend his time working on the problems and not setting up password resets and building forms.
- hashhar 8y ago
  Onec you implement your own Auth you are liable for the all the risks storing personal information comes with. And accusing someone of storing personal data without any substance is something that I don't consider to be in the HN spirit.
falcolas 8y ago
If you store an email, you're liable for GDPR controls, IIRC. Why expose yourself to that liability if you don't need to?
abecedarius 8y ago
It'd be nice to have a no-login localstorage-based option. I guess you wouldn't get on the leaderboard, but does anything else need an identity?

ask for a refund

I mean, it is additional work. Not only do you need to store the emails/passwords securely, which while it isn't _that_ hard, it is a needed consideration, but you also need to now: - provide a password reset service - find a way to send emails to this many people for low cost, it is a free service after all, so all of the confirmation/reset emails are an additional cost - etc

lucasverra 8y ago
on the cost side (not counting gdpr), back4app (parse server plateform [1] as a service) provide all of that from scratch. disclaimer : just a paying client here. [1]: https://www.back4app.com/product/what-is-parse-server https://www.back4app.com/product/what-is-parse-server
jaaames 8y ago
Firebase has ergonomic free auth that does all this out of the box.

znpy 8y ago

It would be cool if auth0 (https://auth0.com/ https://auth0.com/) would offer free usage of their service, given the fact that they would only use basic features.

acheron 8y ago

What I wonder is why can't I just create an arbitrary username unlinked to email or anything else? This isn't a bank account we're talking about. Oh right, because they're probably gathering personal information, which is why they want access to my Google or other accounts. I guess since they appear to have a "reddit" auth option and I think reddit still lets you create arbitrary usernames, that would be a two step process to do it.

dickeytk 8y ago
that's such a baseless accusation. I think it's more likely Eric just wanted to spend his time working on the problems and not setting up password resets and building forms.
hashhar 8y ago
Onec you implement your own Auth you are liable for the all the risks storing personal information comes with. And accusing someone of storing personal data without any substance is something that I don't consider to be in the HN spirit.

falcolas 8y ago

If you store an email, you're liable for GDPR controls, IIRC. Why expose yourself to that liability if you don't need to?

abecedarius 8y ago

It'd be nice to have a no-login localstorage-based option. I guess you wouldn't get on the leaderboard, but does anything else need an identity?