claystraw

5 ms·

1.
When is OAuth2 and Open ID Connect Useful?(ory.dev)
87 points by claystraw 5y ago|17 comments
2.
by claystraw 5y ago
We actually want to have it work natively together, but just can't find the time to implement it. But the team is growing, so we'll definitely have something here soon! :)
3.
by claystraw 5y ago
Does https://news.ycombinator.com/item?id=29330103 answer your questions or can I clarify further? :)
4.
by claystraw 5y ago
Clerk (your profile says you're CTO) has a per-user pricing though? Or are you planning on changing it? > It says "First 900 free" and "First 100 free" without any indication of what those numbers mean. Thank you
5.
by claystraw 5y ago
Ah, thank you for the clarification and I agree! Another point is that 3rd party tools can easily deactivate profiles (we've seen enough posts on HN about being locked out of a Google account) which means users loose access to your sys
6.
by claystraw 5y ago
Thank you Sytten, this comment makes me happy because it confirms our bias! MAU pricing has always been my personal enemy. Ory is and never will charge on a MAU basis. Instead, we'll be working with CPU, Memory, and Disk usage (like an
7.
by claystraw 5y ago
Nice, we'll add a guide shortly. This is already possible but we just didn't have time yet to add it to the guide :) If you want, create an issue in the GH ( https://github.com/ory/kratos-nextjs-react-example&#
8.
by claystraw 5y ago
With great power comes great responsibility :) Having the flexibility to build persistence yourself is great, it comes at the cost and responsibility of continuously maintaining it! We have run into so, so many edge cases. Here are some exa
9.
by claystraw 5y ago
Yes absolutely, you can use the Ory SDK's `toSession()` function to resolve a Session Cookie (for browsers) or Session Token (for non-browsers, e.g. native mobile apps) to its identity. We have on the list to add a section about using
10.
by claystraw 5y ago
Thank you for these questions! First of all I want to say that Ory Kratos is built for customer facing authentication first, so many of the enterprise requirements (e.g. LDAP integration) are still missing. Our vision is to build the de-fac
11.
by claystraw 5y ago
Both! :) Ory Cloud is still in it's early phases and we have not been very good at communicating it well. Basically, we run Ory Kratos in Ory Cloud and it has full API and configuration and data compatibility with the version that is o
12.
by claystraw 5y ago
Thank you! We've updated the links and they should work in a few minutes :) All of Ory's Open Source software is unique in a way that we strictly follow domain-driven design. Solve one problem only, but solve it extremely well, an
13.
by claystraw 5y ago
I have not used NextAuth, so take my analysis with caution. As far as I can tell, NextAuth is similar to Passport.js as it offers many adapters to sign in with different providers (e.g. Twitch or Pipedrive). It is not an identity system tho
14.
by claystraw 5y ago
Passport.js is an integration library for an identity system - so it's like a client library. As far as I know (it's been a while) it does not solve the "registration" or "password recovery" part itself. The sy
15.
by claystraw 5y ago
Hello, one of the maintainers of https://github.com/ory/kratos (the system used in the blog post) here :) We started Ory Kratos because we saw so many developers struggle with OAuth2 and OpenID Connect. If you have any