4 ms·
OpenAI uses open source Ory to authenticate over 400M weekly active users
- aidenesco 2y agoDoes anyone here have experience with Ory products and Google Cloud? Easy enough to set up CloudSQL with Postgres and run the Ory software on Cloud Run? Any weird issues/hiccups?
- mooreds 2y agoDisclosure: I work for a competitor of Ory. I'll be interested to see what pops up here, but you'd probably have better luck joining their slack community and asking there: https://www.ory.sh/community/ https://www.ory.sh/community/
- vinckr 2y agothanks Dan! To save you one click you can go here directly: https://slack.ory.sh/ https://slack.ory.sh/ (Disclosure: in charge of community at Ory ;-))
- mintplant 2y agoFunny, OpenAI is one site where I've noticed that the login is kinda wonky. Every so often it just randomly fails, gets stuck, gets caught in a redirect loop... That may not be Ory's fault, but unfortunately this may not be the ringing endorsement they were hoping for.
- aeneas_ory 2y agoIf you could share a HAR file (stripped of credentials of course) or a screenshot of your network tab when it happens, we'd love to take a look and figure out what's going on! If it's reproducible even better. You can send it to aeneas at ory.sh. It may not be OAuth2 related, and I'd like to make sure.
- ustad 2y agoSomeone else with the same problems! What is going on with the continuous redirects? I think they are pushing users to either sign up and/or pay up and/or disable ublock. What kind of BS is that? No worries - It forces me to use claude more and I’m cool with that.
- advaitruia 2y agoFunny thing is that its powered by Auth0. Its funny that Ory is asking for the HAR file
- zenlot 2y agoWhy it's funny? It just shows their openness and dedication. Funny that you are flagging it as funny. PS: no affiliation, heard 1st time today about them.
- kavenkanum 2y agoNot as bad as their payment provider. So many problems... One of the worst integration I've ever seen. But who knows, maybe it was generated by their chat. That would explain a lot.
- oulipo 2y agoIs the full auth suite open-source, and can it be hosted locally? Would be nice to add a Dokploy plugin!
- jeffhickman 2y agoYep! Check it out: https://github.com/ory https://github.com/ory (Disclosure: I work with the community and customers at Ory)
- doctorpangloss 2y agoMaybe you guys should make it possible to add passwords to any account, including a Google authed one. Like I get Keycloak is complicated but it is also very useful.
- aeneas_ory 2y agoThat is definitely possible when you use our identity product, which is also open source: https://github.com/ory/kratos https://github.com/ory/kratos There you can combine all authentication methods in any shape or form you wish!
- doctorpangloss 2y agoSo why isn’t it possible with OpenAI? They use Auth0, right? What exactly do they use Ory for?
- mooreds 2y agoDisclosure: I work for an Ory competitor. Yeah, the case study is a little hand-wavey, but from hints on the ChatGPT login page, it seems like they still use Auth0 (at least for the free, consumer facing application that I use). From https://www.ory.sh/case-studies/openai https://www.ory.sh/case-studies/openai "OpenAI is rapidly building its new identity experiences, having already enabled unprecedented logins per second with levels of data transparency and infrastructure flexibility that were not possible with other vendor solutions." Maybe they are using Ory for new auth experiences?
- ffo 2y agoCould also be that they use ory "only" for oauth 2. Customer facing it looks like a combination of nextauth and auth0 (at least on my end)
- rvanmil 2y agoMy gosh yes please! This is so annoying. Last time I checked it’s impossible to disconnect your email address from Google auth if you used that to sign up. And no way to delete the account and recreate with that email address.
- apitman 2y agoFrom what I can tell, Ory is a high quality auth stack capable of scaling up. If you're looking for something a bit simpler to work with for indiehosting use cases, I maintain a list here: https://github.com/lastlogin-net/obligator?tab=readme-ov-file#comparison-is-the-thief-of-joy https://github.com/lastlogin-net/obligator?tab=readme-ov-fil...
- mooreds 2y agoIs this only for open source self-hosted solutions, or for any auth solution that can be self-hosted? I'd like to add FusionAuth if the latter (we have a full featured free option but are not open source). Should I just add a comment on the google sheet or is there a better way?
- aeneas_ory 2y agoThe list is really helpful for people to navigate, and here is additional context to the complexity topic :) If you use our managed services (https://console.ory.sh https://console.ory.sh), it is easy to set up and scale because we have a bunch of defaults, UIs, and the security stuff all set up already. If you run it completely on your own, which does require some skill especially in terms of (security) incident response, it is more work because you have to figure out a few pieces yourself (the stack is agnostic to the environment). We have an option for self hosting with all the stuff we have built for the SaaS, but it only makes sense for businesses of a certain size. Complexity also depends on how many services you combine, some people try to use everything at once and it's overwhelming. What’s making Ory complex for people who do it by themselves, is that Ory is 3 different API first products that work stand alone or in concert. To wire this up, one requires understanding of every service. Here it is easier to spin up a cloud account, or use an alternate project which is e.g. just one docker container.
- gtirloni 2y agoApparently Firefox is blocked `Failed to verify your browser - Vercel Security Checkpoint`.
- aeneas_ory 2y agoResolved, Vercel thought we are being DDoS’ed!
- deleted 2y ago[deleted]
- advaitruia 2y agoCould you clarify what OpenAI actually uses Ory for? Their main login page is powered by Auth0
- njintje 2y agoDid they only switch recently? I remember seeing Auth0 a few months ago.