5 ms·
I suspect it’s either by design that it is this terrible and hard to deal with or larger auth companies have a vested interest in keeping it this terrible.
by lloydatkinson 4y ago
I suspect it’s either by design that it is this terrible and hard to deal with or larger auth companies have a vested interest in keeping it this terrible.
- haswell 4y agoThere is no grand conspiracy here, and the problems OAuth is trying to solve can be pretty messy regardless of the approach. When the environment involves delegating authentication across service providers, dealing with browsers and native clients, mobile apps, etc, there will not be a simple solution. This is made even more challenging by constantly evolving application and edge deployment architectures, each bringing with it a new element of complexity. OAuth sucks, and I’m sure it could be replaced with something better, but that replacement will also suck and bear a passing resemblance to OAuth, because the underlying problem is a messy one that isn’t going away soon.