[littlecranky67]

OAuth2 was designed in a time when everybody thought consolidating logins would be wise, and just use Google / Facebook / Microsoft accounts to login everyhwere.

OAuth2 was production ready when everybody realized having FAANG logins is insane, as they use it to massively track you on websites that else would be beyond their reach. And since reports off random FAANG account shutdowns, it is even wise not to use them when you are okay with tracking, as suddenly a handfull of FAANG megacorps have the power to shut down your digital life with a click.

So here we are, having to deal with massive protocol overhead for a feature most of us don't want anymore.

[uzakov]

> OAuth2 was production ready when everybody realized having FAANG logins is insane

I would have to disagree with this statement for a number of reasons:

1) HN community sometimes could be a bubble, in a sense that many developers here share similar opinions etc but there is a big amount of people outside of the HN community who share different views about software development, how they spend their times (I know some soft engineers who spend 0 hours outside of work doing anything IT related, not saying it's bad or good, just different to many HN people)

2) An average customers isn't necessarily aware of account shutdows or any implications of having centralised systems that you talk about

3) I think there is not enough data to support your statement, tho would be good to see if you have any to share

[ratg13]

Your thoughts seem misguided.

OAauth2 was never intended for authentication, it was intended for authorization. (i.e. - "authority X gives you Y permission for Z feature"

Facebook and Google were just the first to bastardize the protocol and leverage it for authentication. (i.e. - since we can give you permission, you are probably who you say you are)

OAuth was never intended to work like this, which is why it saw limited adoption.

Finally OIDC was added to the protocol to catch up with how people are using it, which is why you now see everyone migrating to OIDC, which makes federation for everyone much simpler.