[zwnow]

I wish software wasnt like the wild west where everyone can do as they please... Well defined proven standards would be so cool to have, but no, we have like 20 different ways to do auth and none of them are secure, regular switches from favoring SSR to client side rendering back to SSR again. Just to name some examples.

[chrisweekly]

Hmm, I've been doing webdev for a living since 1998, intimately familiar w/ the complete history and modern practices, and I respectful disagree. Pretty sure it's a good thing we're not all forced to do things the same way. And the new SSR with CSR capabilities is not at all the same as the old SSR. You're right that auth is kind of a hot mess though.

[zwnow]

> And the new SSR with CSR capabilities is not at all the same as the old SSR

Yea I know its just a display of the industries indecisiveness. Everytime we need something new and fresh some old favorite is revived until after 5 years its old again. I like being able to do things differently, I hate having to implement "security" features knowing all too well that they aren't secure at all. Minimizing attack surface should not be the default. And its not like this is a new problem. For some reason web devs love to work around a problem instead of fixing it.

[chrisweekly]

Sorry, no, you seem to have misunderstood that I'm disagreeing with you. Modern SSR is not just a return to the same old thing.

[zwnow]

It most definitely is. Same old shit with a twist. Also apparently all web devs are cloudslaves nowadays as well. Webdev is dead.