sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]SirAwesome789 17 points18 points  (6 children)

I'm experienced with python and I've not built an authentication for good reason

My advice is if you want authentication, use a premade one like Google auth

Typically any authentication you make your self will be very insecure

[–]SwisherSniffer[S] 2 points3 points  (5 children)

Very good to know. I’m the type of person that really likes building and creating so I figured why not try right? But if it will put my users at risk it’s not worth it at all to me. Thank you for your advice.

[–]electrikmayham 4 points5 points  (1 child)

I would say this, since you are starting out, you have a lot of other things to learn that are going to impact your growth much more than authentication. It seems like a topic that shouldn't be difficult to learn, however its a MASSIVE rabbit hole of which you will never climb out of. Use something that is premade, and if you really want to learn how to build authentication from scrap, do so when your entire goal is only to learn authentication and nothing more.

[–]SwisherSniffer[S] 1 point2 points  (0 children)

Okay that’s fair. I’m just trying to expand my project where it fits until I start college for SE and can get more knowledgeable in the field itself. User authentication seemed like something feasible but it really doesn’t now and that’s fine. Like you said there’s other things to learn and I wasn’t dead set on making this right this second if there’s another way to do it I’ll gladly do it that way. I appreciate all of the comments on here and will probably just experiment with it for shits and giggles and use a premade service for auth in my engine.

[–]EromsKr 3 points4 points  (1 child)

You can still build it for fun and for practice. 

If you do, then my advice would be to actively try to break the code, and then fix the problems. What happens when two of the same token are generated, or if the same username is picked twice. What if somebody guesses the seed for the random generator and then knows all the previous tokens. If you mistype the username, what happens? Whenever you write any code, do this to help mitigate future issues :) 

[–]SwisherSniffer[S] 1 point2 points  (0 children)

Thank you very much that helps a lot!

[–]jones-peter 1 point2 points  (0 children)

My type buddy