5 ms·
Authentication is a very simple part and doesn't add complexity. Every platform has a plethora of libraries to deal with anything. Authorization is a real deal.
by bvrmn 4y ago
Authentication is a very simple part and doesn't add complexity. Every platform has a plethora of libraries to deal with anything. Authorization is a real deal.
- ianpurton 4y agoThere are libraries but you still have to integrate them into a front end whilst being aware of any security issues. Those libraries generally come with lots of dependencies so splitting out the front end and back end auth code into a container can reduce the complexity of your main app and is a nice separation of concerns in my opinion.
- bvrmn 4y agoBut you solution requires architectural decisions. Like fixed DB. For example main app uses Mongo. And now it must be integrated with PG. I choose orthogonal set of primitives as a library any day. Frameworks and more so 3d-party services are too rigid and can contain hidden maintenance cost regarding flexibility. For example, it seems barricade doesn't support TOTP or SMS. What should I do as a backend developer?
- ianpurton 4y agoAgreed Barricade is a Postgres solution so may not fit if you are already using Mongo. Barricade supports OTP via email. TOTP is on the road map.
- hamandcheese 4y agoAnd best of luck to anyone attempting to extract authorization to a microservice in a way that doesn't create new problems.