3 ms·
HTTP auth is vastly insufficient for most use cases. You are missing passwords resetting, 2FA, bot/abuse detection, and probably a whole collection of other stu
by Gigachad 3y ago
HTTP auth is vastly insufficient for most use cases. You are missing passwords resetting, 2FA, bot/abuse detection, and probably a whole collection of other stuff. I’m also not sure if passwords manager extensions can prefill them. As well as the fact that the login form is only 1% of what an auth library does.
- simonjgreen 3y agoThey didn't actually say they used basic Auth :) (although it's a reasonable assumption) I think the principal here is not reinventing wheels.