4 ms·
> Auth is a solved problem by minds much smarter than my own. Is it? It seems like all the outsourced auth has lots and lots and lots of problems, issues, etc
by bsder 2y ago
> Auth is a solved problem by minds much smarter than my own.
Is it? It seems like all the outsourced auth has lots and lots and lots of problems, issues, etc. along with being remarkably expensive.
I'm not saying I, personally, can do better, but it seems like auth is far from a solved problem. Especially since it seems like the difficult part of "auth" is actually "customer support" rather than any technical issue.
(I would argue that the lack of an open-source "Auth in a Box" seems to also argue that auth is far from "solved".)
- wutwutwat 2y agoI was talking about third party libraries (library code), not providers (okta)
- sam_lowry_ 2y agoThe evil in the details: Spring Security is complex and brittle, I have seen a push to use underlying libraries e.g. nimbus in real-life projects.
- vinckr 2y agoThere are many open source "auth in a box" projects that you can self-host, such as Ory (https://github.com/ory/ https://github.com/ory/), Zitadel, Keycloak, and many other small projects. They all have small differences but for small to mid scale projects its definitely manageable.