3 ms·
There are libraries but you still have to integrate them into a front end whilst being aware of any security issues. Those libraries generally come with lots o
by ianpurton 4y ago
There are libraries but you still have to integrate them into a front end whilst being aware of any security issues.
Those libraries generally come with lots of dependencies so splitting out the front end and back end auth code into a container can reduce the complexity of your main app and is a nice separation of concerns in my opinion.
- bvrmn 4y agoBut you solution requires architectural decisions. Like fixed DB. For example main app uses Mongo. And now it must be integrated with PG. I choose orthogonal set of primitives as a library any day. Frameworks and more so 3d-party services are too rigid and can contain hidden maintenance cost regarding flexibility. For example, it seems barricade doesn't support TOTP or SMS. What should I do as a backend developer?
- ianpurton 4y agoAgreed Barricade is a Postgres solution so may not fit if you are already using Mongo. Barricade supports OTP via email. TOTP is on the road map.