3 ms·
Start any greenfield project, hand-coded auth takes up 50% of the development time of the entire MVP
by mvkel 5mo ago
Start any greenfield project, hand-coded auth takes up 50% of the development time of the entire MVP
- awestroke 5mo agoIt takes like an hour. So that's a quick mvp then
- transitorykris 5mo agoSocial logins, email logins, password resets, multi-tenant, organizations, many to many users to organizations, etc etc. Not necessary for MVP, but can definitely be painful hacking in later if the MVP hits.
- koliber 5mo agoWhat you are talking about is in a large part authentication. You can do authentication using an external service and still have your user table locally. You can also do authorization locally with a local session table while leaving authentication to a SaaS.
- RedShift1 5mo agoBy the time you're so big you need all of that, there will be other people at the table to "hack that in".
- SkyPuncher 5mo agoI strongly disagree. If you’re selling to other businesses, much of that is an expectation.
- xmcp123 5mo agoAll I am seeing here is Django modules
- pdimitar 5mo agoSocial logins, multi-tenant and organizations are very far from table-stakes for an MVP. Whether it's painful to put in later or not is sadly nothing that the managers and executives concern themselves with.
- Orygin 5mo agoDepends on the company and product. The SSO/Social login, multi tenant and multi platform are indeed needed for my MVP.
- pdimitar 5mo agoIndeed it depends of course. Though I don't find it fair for those requirements to be presented as table-stakes and required, as my original parent comment seems to have done.
- the__alchemist 5mo agoDjango, Rails etc handles this.
- mvkel 5mo agoSo... you just have to not build your web app in the most popular web app language? Somehow i think there will be big time debt from that decision
- the__alchemist 5mo agoThose are both very popular languages for web backends, and both of those platforms are mature and robust.
- xmcp123 5mo agoNot as big as the debt you will get from having to implement it all yourself. And it's not like he's suggesting you use cobol - there is not an issue of finding people who can work with both rails and django, so the popularity isn't really relevant.
- nimchimpsky 5mo ago[dead]
- xmcp123 5mo ago…use Django, install auth modules
- deleted 5mo ago[deleted]
- jadbox 5mo agoI feel seen. It's compounded if you also need to add HIPAA row-level security compliance that spans to every form of resource.
- deleted 5mo ago[deleted]
- princevegeta89 5mo agoI would disagree here. You probably need OAuth with popular social services and implement username, password or OTP-based auth overall. For an MVP, you don't need to care about more details beyond this; it is hardly 10% of the entire effort, if not 5%.
- cpursley 5mo agoMature frameworks generally handle auth out of the box.