4 ms·

Ask HN: What are the major open source alternatives to Auth0?

• mindcrime 5y ago
  CAS? https://www.apereo.org/projects/cas https://www.apereo.org/projects/cas https://github.com/apereo/cas https://github.com/apereo/cas https://apereo.github.io/cas/6.4.x/index.html https://apereo.github.io/cas/6.4.x/index.html Also, floating around out there, somewhere, on the 'net, should be whatever became of the old Sun Identity Manager product. During the Jonathon Schwartz era, Sun made a TON of their products Open Source, but after the Oracle acquisition a lot of that stuff was left to more or less die on the vine. But in some cases, other firms picked up the code and continued the project(s). I think that happened for their Idm product, but don't quote me on that.
  • eatonphil 5y ago
    Thank you!
  • jen20 5y ago
    ForgeRock picked up a bunch of it and did just as objectionable things with the licensing - for all intents and purposes the the Sun identity stuff is dead unless you enjoy dealing with ghouls. I’d say better alternatives to Auth0 today are things like KeyCloak.
    • mindcrime 5y ago
      Aah, yeah, I remember now, Sun did make a lot of stuff Open Source, but they used a slightly controversial license (the CDDL[1]) for a lot of it. As I recall, it caused a lot of grief for people who wanted to pick up their stuff and do anything downstream with it. I do remember the name ForgeRock now, but I never used any of their stuff. By the time all that happened, I wasn't doing much in the IdM space anymore. The whole episode is kind sad, really. Schwartz did some good things at Sun, and while their embrace of Open Source wasn't perfect, they released a lot of code and put a lot of weight behind F/OSS. If they had been able to continue as an independent company a bit longer, and not get borg'd by Oracle, it would have been interesting to see what might have happened. [1]: https://en.wikipedia.org/wiki/Common_Development_and_Distribution_License https://en.wikipedia.org/wiki/Common_Development_and_Distrib...
      • gtirloni 5y ago
        I disagree. Oracle just continued the flawed open source strategy that Sun was already carrying out for many years. If Sun had continued, I think we wouldn't be much different than we are today. The OpenSolaris project was a great example. It was already dead way before Oracle bought Sun.
• sharemywin 5y ago
  https://www.ory.sh/login-spa-react-nextjs-authentication-example-api-open-source/ https://www.ory.sh/login-spa-react-nextjs-authentication-exa...
  • eatonphil 5y ago
    I mentioned Ory already, thanks!
    • sharemywin 5y ago
      Sorry I can't read.
• Nezteb 5y ago
  https://supabase.com/ https://supabase.com/ is a new popular option.
  • eatonphil 5y ago
    I don't think that's an alternative to auth0 but an alternative to an entire backend. You don't just use supabase as your auth service AFAIK.
    • kiwicopple 5y ago
      {supabase ceo} You can! A lot of people do. Or you can use the Auth server directly: https://github.com/supabase/gotrue https://github.com/supabase/gotrue
      • eatonphil 5y ago
        Thanks for clarifying! Is your fork meaningfully different than Netlify's original repo?
        • kiwicopple 5y ago
          If you use MySQL you should go with Netlify’s and our fork for Postgres. We have a few extra OAuth/SMS providers too, but hope to upstream them shortly
• gabrielsroka 5y ago
  Shibboleth? It does OIDC and SAML, etc. https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376878976/OIDC+OP https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/page...
• der-ofenmeister 5y ago
  passportjs if you're using node <http://www.passportjs.org/ http://www.passportjs.org/>
  • eatonphil 5y ago
    That's not an auth server AFAIK, that's just a library for connecting to auth servers.