web-security

George 2019-06-17T15:38:01.000200Z

@geo.ciobanu has joined the channel

George 2019-06-17T15:46:46.002800Z

Hi everyone! Apologies if this has been answered before - I googled for answers and tried to upgrade my subscription to paid so I can search this channel's history but it's not possible. Q: What is the preferred, up to date authentication web framework that enables a wide range of auth options (email + pw, username + pw, oauth etc) similar to Devise for RoR? If the answer is roll your own that's ok too, I just don't want to reinvent the wheel. Thank you!

George 2019-06-17T15:47:46.003500Z

(I think I need to create my own org with myself as a user to get a paid subscription....)

donaldball 2019-06-17T15:49:18.004900Z

I have come to the view that almost no organizations in 2019 have the operational capability to responsibly maintain their own authentication systems. My company is currently using auth0 and are fairly pleased.

donaldball 2019-06-17T15:51:48.006400Z

As for clojure libraries for web request authentication, I think the answers are still mostly buddy and friend, though I’ve found them unsatisfactory for my use cases and just write my own openid connect interop handlers.

George 2019-06-17T15:53:47.007800Z

thank you @donaldball - for complex reasons I do have to create and manage an authentication system (and have the time and expertise resources needed to do so). Buddy seems to to be the best reviewed one, it's just that it has been inactive for a while, was just making sure that it's still being actively used for someone.

dangercoder 2019-06-17T17:46:28.008400Z

I am relying on AWS Cognito + buddy