3 ms·
> Using a short-term JWT and bcrypt to salt passwords is like maybe 10 lines of code. You are presenting an extremely limited scope. What you get from using a
by dewey 4y ago
> Using a short-term JWT and bcrypt to salt passwords is like maybe 10 lines of code.
You are presenting an extremely limited scope.
What you get from using an authentication provider is things like verifying email addresses, OAuth where you just have to "enable" Google, Github, Apple login possibilities. Implementing all these flows yourself is a lot more than 10 lines of code.
Then you also have to do password reset flows, resent email confirmation emails etc.
- tppiotrowski 4y agoAlso two-factor auth via email/SMS codes
- x1xx 4y agoalso password policies, account takeover detection/prevention, user device/session list management
- jaeming 4y agoYes, that's why I said "the basics are really easy"? This was not meant to imply 10 lines of code handle the complete user experience workflow around auth. In saying that I have implemented oauth for multiple providers in not too much more lines of code. Maybe like 100.