2 ms·
Unfortunately not really. Amount of foot guns in auth flow is high. Implementation of login / password form is just a small piece. Making sure there are no ac
by ozim 2y ago
Unfortunately not really.
Amount of foot guns in auth flow is high. Implementation of login / password form is just a small piece.
Making sure there are no account enumeration possibilities is hard. Making sure 2FA flow is correct and cannot be bypassed is hard. Making proper account recovery flow has its own foot guns.
If you can use off the shelf solution where someone already knows about all those - it still stands don’t roll your own.