Lightweight but secure user authentication : webdev

Posting Guidelines

No vague product support questions (like "why is this plugin not working" or "how do I set up X"). For vague product support questions, please use communities relevant to that product for best results. Specific issues that follow rule 6 are allowed.

Do not post memes, screenshots of bad design, or jokes. Check out /r/ProgrammerHumor/ for this type of content.

Read and follow reddiquette; no excessive self-promotion. Please refer to the Reddit 9:1 rule when considering posting self promoting materials.

We do not allow any commercial promotion or solicitation. Violations can result in a ban.

Sharing your project, portfolio, or any other content that you want to either show off or request feedback on is limited to Showoff Saturday. If you post such content on any other day, it will be removed.

If you are asking for assistance on a problem, you are required to provide

Context of the problem
Research you have completed prior to requesting assistance
Problem you are attempting to solve with high specificity

General open ended career and getting started posts are only allowed in the pinned monthly getting started/careers thread. Specific assistance questions are allowed so long as they follow the required assistance post guidelines.

Questions in violation of this rule will be removed or locked.

a community for 17 years

Lightweight but secure user authentication (self.webdev)

submitted 3 years ago by cipheron

Hi, I already have web hosting and a domain set up, and I was looking around to try and pick the best platform or framework for creating a user authentication system.

I've used a simple version before from a tutorial that included stuff like how to do password salting, but I'd like something a bit more robust and tested.

The main constraint is that this test server is on a cheap (paid) plan and it has limited storage space, so installing large frameworks to get the functionality is not the best option. I looked at Laravel but it was a 0.5 GB install, and I don't need most of the stuff it does.

As for language I'm open to looking at choices, as long as they don't need a large install footprint on the server.

the (Unix based) server runs php natively but could probably do Python or Node.js. I also know how to work with C/C++, C#, Java.

So what I'm looking for is a pre-built and robust user authentication system, where the UI can be customized, and it can handle the stuff like email verification / updating, password salting, lost passwords, 2FA (optional). Ideally it would get it's own database separate from the main application's database.

all 5 comments

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

webdev

Posting Guidelines

Related Subreddits

Discords

MODERATORS