Hacker News new | ask | show | jobs
by mohitsingh 1449 days ago
Well, I wrote one with rust and actix-web for exact same purpose.

In my opinion, writing basic auth is simple and safe if you keep OWASP guidelines and other best practices in mind but adding features like SSO and MFA etc is complicated. With that said, almost everything else I tried feels so heavy and slow that I'm sticking with mine for now.

If I've to use prebuilt solutions, I'll pick one that is open source and can be self hosted.

1 comments

Seconding this.

Basic auth is easy.

The hardest parts are OAuth, SSO, MFA, OWASP Security, tracking metrics correctly. Good lord.