[BrianHV]

Because of the points you mentioned, I've been wondering why I haven't been able to find a framework-independent, open-source user management and authentication system. This seems like the sort of thing that should be solved in a standard way and not reinvented by every framework (or worse, application) that needs user management.

I've come across some paid services (e.g., stormpath, auth0) that seem to do what I'm talking about. It would be really nice if there were a free project along those lines though.

[awinder]

The API gateway approach has a lot of the upsides you mention:

1. http://microservices.io/patterns/apigateway.html 2. https://getkong.org/ (a few auth plugins) 3. https://github.com/auth0/nginx-jwt / https://www.stavros.io/posts/writing-an-nginx-authentication...

[iamveen]

I have yet to use this for anything, so I can't vouch for it's quality, but it seems to be exactly what you are looking for.

http://www.keycloak.org/

Website blurb:

Add authentication to applications and secure services with minimum fuss. No need to deal with storing users or authenticating users. It's all available out of the box.

You'll even get advanced features such as User Federation, Identity Brokering and Social Login.

[Can_Not]

I don't think I understood your question, but this might be helpful for people having issues in similar keyword spaces: https://github.com/iNeedThis/phoenix-starter