3 ms·

I'm also a huge fan of Keycloak for the same reason. It's been a while since I've looked at the Ory suite, but at least a year or two ago Keycloak was still the

I'm also a huge fan of Keycloak for the same reason. It's been a while since I've looked at the Ory suite, but at least a year or two ago Keycloak was still the much more mature (and still fully OSS) product. Either way, reading the Oauth2 and OIDC specs are probably the best way to get a really solid understanding of modern standardized authn and how to start thinking about authz. https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata https://openid.net/specs/openid-connect-discovery-1_0.html#P... https://openid.net/specs/openid-connect-discovery-1_0.html#RFC6749 https://openid.net/specs/openid-connect-discovery-1_0.html#R...

password4321 4y ago
Keycloak: Open-Source Identity and Access Management https://news.ycombinator.com/item?id=31258469 https://news.ycombinator.com/item?id=31258469 and a couple lighter-weight projects to bookmark for myself: Caddy Security https://news.ycombinator.com/item?id=31258469#31259369 https://news.ycombinator.com/item?id=31258469#31259369 GoTrue https://news.ycombinator.com/item?id=29392517#29399741 https://news.ycombinator.com/item?id=29392517#29399741 and a brief discussion of SCIM (Cross-domain Identity), including a Keycloak v16 extension: https://news.ycombinator.com/item?id=31408059#31413662 https://news.ycombinator.com/item?id=31408059#31413662