I really wanted to avoid Oauth providers and keep the auth in-house only. For a more serious site like an e-commerce or a SaaS sure, but for a very low stakes s

I really wanted to avoid Oauth providers and keep the auth in-house only. For a more serious site like an e-commerce or a SaaS sure, but for a very low stakes site I wanted to see what's possible with minimal 3rd party dependencies. I'm sure many users prefer the Google/Github/Apple/Twitter? buttons, and the moment they see a email+password only wall they bounce, but I think that offering a username + auto suggested password is a superb UX. I wanted to hear if someone who went this route later regretted it, or if they are happy with it and how they solved the problems that may appear. Mainly abuse and forgot password flows (just count that user as forever gone?).