Hacker News new | ask | show | jobs
by gardnr 403 days ago
Most people will reach for BetterAuth when they would reach for NextAuth. Basically, when you want to integrate OIDC or SSO of some kind.

Back when I was looking at it a couple of months ago, the big thing that popped out was that BetterAuth supports email and password out of the box, where NextAuth seems to have a preachy disclaimer about how email and password is inherently insecure, so they leave you to your own devices to implement password hashing and the like.

That did give a sense that NextAuth was the first to dominate the space and feels as though they can dictate morals.

BetterAuth seems to be a bit more developer-focused.

1 comments

> where NextAuth seems to have a preachy disclaimer about how email and password is inherently insecure

Yeah I needed a login & password auth last friday and I was so frustrated with NextAuth I ended up using nginx to set up http basic auth.