Hacker News new | ask | show | jobs
by sandreas 625 days ago
Social auth almost always means oauth (2.0). It's good to have this, because you could technically Deploy your own oauth provider.

However, for my smaller personal side projects I rely on a simple JWT auth based on JWT, QR-codes and https-only AS secure AS possible cookies.

I plan to try openid but i did not habe the time yet.

If you have a userbase, a local username/password login should be at least an Option...