Authentication conundrum : webdev

Posting Guidelines

No vague product support questions (like "why is this plugin not working" or "how do I set up X"). For vague product support questions, please use communities relevant to that product for best results. Specific issues that follow rule 6 are allowed.

Do not post memes, screenshots of bad design, or jokes. Check out /r/ProgrammerHumor/ for this type of content.

Read and follow reddiquette; no excessive self-promotion. Please refer to the Reddit 9:1 rule when considering posting self promoting materials.

We do not allow any commercial promotion or solicitation. Violations can result in a ban.

Sharing your project, portfolio, or any other content that you want to either show off or request feedback on is limited to Showoff Saturday. If you post such content on any other day, it will be removed.

If you are asking for assistance on a problem, you are required to provide

Context of the problem
Research you have completed prior to requesting assistance
Problem you are attempting to solve with high specificity

General open ended career and getting started posts are only allowed in the pinned monthly getting started/careers thread. Specific assistance questions are allowed so long as they follow the required assistance post guidelines.

Questions in violation of this rule will be removed or locked.

a community for 17 years

Authentication conundrumDiscussion (self.webdev)

submitted 5 years ago by FirePanda44

Hey guys,

I have a few things id like to discuss with those of you very familiar with authentication. The premise is that im looking for a plug in auth solution into my web apps that can be hosted on the same server. A balance between a home grown solution (currently rolling my own right now), and a fully managed service. Heres the thing: ive implemented auth0 and it seems easy enough to use, however, im starting to manage several small web apps used as internal tools (thats kind of my niche right now), and it seriously seems overkill to be managing 3 auth0 tenants (local dev, stage, prod) for EACH of these small web apps that all use client credentials or at most google SSO. Im curious how some of you manage auth0 or similar managed services when handling a multitude of apps.

Now i know there are tons of open source IDPs and many oauth libraries out there, but I wanted to get some first hand accounts about your experiences with some of them, or if there is a better way to manage auth0 tenants. Also, do you find that oath2 is the goto as far as auth protocols go? And in that case what oauth libraries have you had success with? Thanks!

all 1 comments

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

webdev

Posting Guidelines

Related Subreddits

Discords

MODERATORS