3 ms·
> OAuth2 is built to be super simple to implement client applications Has this fallen through from an alternate dimension?
by andybak 2y ago
> OAuth2 is built to be super simple to implement client applications
Has this fallen through from an alternate dimension?
- frogsRnice 2y agoNo you misunderstand- it is super simple to pay some other company a small amount to do this for you. No complexity to worry about what so ever. And if things require even a slim amount of thought and planning - chuck it to your favourite LLM and call it a day. Just in case the sarcasm wasn’t clear I want to personally assure you that nobody ever will confuse an access token for an ID token. :p
- cruffle_duffle 2y agoOr a refresh token (which might be one of those two you mentioned)
- jeroenhd 2y agoOAuth2 is a very simple method to solve a very complex problem. Every part of it has a good reason to exist. Unfortunately, OAuth2 is also used by applications that don't actually have the complex problems OAuth2 is trying to solve, which makes it look unnecessarily complex. Thankfully, just about every language and framework has OAuth2 libraries available so you can use it by copy/pasting four strings, whether it's a good fit or not. That's probably why it's overused as well, to avoid difficult integrations of simpler, custom schemes.