https://supertokens.com/
Join Discord
Something I wrote recently -https://darko.io/posts/but-auth-is-hard I'm really tired of the general...
# share-your-work
d
Something I wrote recently -https://darko.io/posts/but-auth-is-hard I'm really tired of the general narrative that auth is blanket-statement "hard" 😄
i
Thanks for sharing! I'll check it out when I get the chance. Sounds interesting. Even got some Spongebob in there.
d
yep 😁
let me know what you think @ITEnthusiasm 😁
t
> I’m “I’ve used MD5 to hash passwords in PHP” years old. Sure, it was a horrible idea, even back in 2012 > 🤭
same here, but 5 years earlier
d
we're not old 😁 ... we're just "seasoned"
t
experienced
d
what's the gnarliest auth you pulled off btw? 😁
I did an unsalted md5 for a blog site
it got hit by a brute force attack, but luckily, it was on a shared host
and that server kinda decided it had enough and stopped responding 😅
so thanks not-so-great shared hosts, I guess 😁
i
I appreciated the take. I'm definitely used to hearing the "auth is hard" narrative. It was refreshing to see a different, more-balanced perspective from the SuperTokens team -- and with suggestions/options beyond itself too. I still probably won't be trying to invent my own auth any time soon. 😅 Would be fun to test for learning purposes some day; just not enough time today.
d
Absolutely, I don't want to write auth either... like, we've established it's a solved problem. 😄
I'm mostly annoyed at the omnipresent marketing pitch that "it's hard"
without getting into it
and sure, marketing copy is usually short, that's kind of the point
but it has this nasty side-effect, especially present among younger generations of devs, who avoid even looking under the hood of the said "hardness"
and that's not good - you should at least understand how the thing works, before you intgrate it into your software
i
That makes sense. Is this something you commonly see among those who provide closed-source solutions, or open source ones? Or both?
d
aaah... well. I have an interesting story about what actually inspired this post... let's say it involves an exchange I had with a person that works for BigAuth, without naming any names
said person very adamantly defended the standpoint that noone ever should touch auth and it should be left to "grown ups"
i
Yikes 😬
t
I only rolled my own auth for a school project. no salt, no peper. just some hash that was popular back in the days
5 Views
PreviousNext
Powered by

SuperTokens.com

SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).

Powered by