4 ms·

Thanks for the response. I mean from a productivity point of view when building real-world applications. For example, in Go, the development productivity is gr

Thanks for the response. I mean from a productivity point of view when building real-world applications. For example, in Go, the development productivity is great, but I'm not so sure about feature development velocity. There are a ton of HTTP libraries, but it's a barren wasteland when it comes to Auth solutions and you have to rely on a separate service which unnecessarily complicates the infrastructure. Need to quickly put together an application that supports enterprise OAuth? tough luck

caspper69 2y ago
Asp.Net supports both internal & external auth(n|z) providers. I have to admit that I haven't done much with the interweb side. Truth be told, the few times I've used Asp.Net, I used KeyCloak as the authentication provider, and that's Java-based, lol. That being said (and damn you for making me link to ms docs yet another time today), there is a built in provider, but my recollection is it did not support OAuth2 or JWT: https://learn.microsoft.com/en-us/aspnet/core/security/?view=aspnetcore-9.0 https://learn.microsoft.com/en-us/aspnet/core/security/?view... It may not suit your needs, but maybe that high-level doc can help you drill down quickly and not waste too much time on it. I will say that I do always find it amazing how large sites can be sucessfully operated without too much fuss on the platform. Stack Overflow was notorious for being a very high traffic site that ran on a small cluster of machines and was all done in Asp.Net (might have been the old Windows framework, however). I would like to add that I've been working with Entity Framework (EFCore) for the past year, and I've found it to provide velocity on that front. Never was a big ORM fan, but I can definitely see the use cases now.
cyberax 2y ago
> Need to quickly put together an application that supports enterprise OAuth? ???? That's super easy. I added support for Clerk's OAuth to our app in literally 10 minutes. It was as easy as: > token, err := jwt.ParseString(sessionToken, jwt.WithKeySet(r.keySet), jwt.WithAudience(r.audience)) JWT is from `github.com/lestrrat-go/jwx` I'm not sure about SAML, but at this point it's probably best to not even touch it.
- lordofgibbons 2y ago
  I'm complaining about having to use external services to do auth, and your solution is to use external services lol
  - deleted 2y ago
    [deleted]
  - cyberax 2y ago
    You can do Google/Microsoft/Apple OAuth is pretty much the same amount of code. E.g.: https://github.com/pgrok/pgrok/blob/dda32d9accfb46ab41f59cae2dce96346435a213/pgrokd/cli/web_server.go#L159 https://github.com/pgrok/pgrok/blob/dda32d9accfb46ab41f59cae... What else do you need?

caspper69 2y ago

Asp.Net supports both internal & external auth(n|z) providers. I have to admit that I haven't done much with the interweb side. Truth be told, the few times I've used Asp.Net, I used KeyCloak as the authentication provider, and that's Java-based, lol. That being said (and damn you for making me link to ms docs yet another time today), there is a built in provider, but my recollection is it did not support OAuth2 or JWT: https://learn.microsoft.com/en-us/aspnet/core/security/?view=aspnetcore-9.0 https://learn.microsoft.com/en-us/aspnet/core/security/?view... It may not suit your needs, but maybe that high-level doc can help you drill down quickly and not waste too much time on it. I will say that I do always find it amazing how large sites can be sucessfully operated without too much fuss on the platform. Stack Overflow was notorious for being a very high traffic site that ran on a small cluster of machines and was all done in Asp.Net (might have been the old Windows framework, however). I would like to add that I've been working with Entity Framework (EFCore) for the past year, and I've found it to provide velocity on that front. Never was a big ORM fan, but I can definitely see the use cases now.

cyberax 2y ago

> Need to quickly put together an application that supports enterprise OAuth? ???? That's super easy. I added support for Clerk's OAuth to our app in literally 10 minutes. It was as easy as: > token, err := jwt.ParseString(sessionToken, jwt.WithKeySet(r.keySet), jwt.WithAudience(r.audience)) JWT is from `github.com/lestrrat-go/jwx` I'm not sure about SAML, but at this point it's probably best to not even touch it.

lordofgibbons 2y ago
I'm complaining about having to use external services to do auth, and your solution is to use external services lol
- deleted 2y ago
  [deleted]
- cyberax 2y ago
  You can do Google/Microsoft/Apple OAuth is pretty much the same amount of code. E.g.: https://github.com/pgrok/pgrok/blob/dda32d9accfb46ab41f59cae2dce96346435a213/pgrokd/cli/web_server.go#L159 https://github.com/pgrok/pgrok/blob/dda32d9accfb46ab41f59cae... What else do you need?