3 ms·
I once was in a meeting about which web authentication framework to use for a site that ran so long because of bikeshedding that I implemented during the meetin
by bandrami 3y ago
I once was in a meeting about which web authentication framework to use for a site that ran so long because of bikeshedding that I implemented during the meeting and demoed at the end a solution based on the fact that HTTP already provides an authentication facility.
- simfree 3y agoHTTP basic auth? It works well on everything except iOS.
- Gigachad 3y agoHTTP auth is vastly insufficient for most use cases. You are missing passwords resetting, 2FA, bot/abuse detection, and probably a whole collection of other stuff. I’m also not sure if passwords manager extensions can prefill them. As well as the fact that the login form is only 1% of what an auth library does.
- simonjgreen 3y agoThey didn't actually say they used basic Auth :) (although it's a reasonable assumption) I think the principal here is not reinventing wheels.