[{"data":1,"prerenderedAt":372},["ShallowReactive",2],{"project-29329610":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":43,"post_text":45,"what":46,"said":85,"maker_in_thread":222,"shape":224,"grid":228,"attempts":334,"same_week":335,"maker_shows":38,"maker_hidden":365,"reader_version":366,"card":367},"29329610","Ory Kratos","Open-Source Auth for NextJS \u002F React","title","Show HN: Open-Source Auth for NextJS \u002F React","https:\u002F\u002Fory.dev\u002Flogin-spa-react-nextjs-authentication-example-api-open-source\u002F","ory.dev","vexcaustic",1637759289,2021,107,49,493,2533,20,"notable","security_privacy","authentication","library",[21,24,25,26],"oauth2","openid connect","open source auth","curious",-0.004,{"positive":30,"neutral":31,"mixed":30,"critical":32},2,31,5,40,{"docs":35,"execution":37,"privacy":39,"pricing":40,"design":41,"idea":42},{"positive":36,"critical":30},0,{"positive":36,"critical":38},1,{"positive":36,"critical":36},{"positive":36,"critical":30},{"positive":36,"critical":36},{"positive":36,"critical":36},[32,44,44,44,44,38,44,36,44,44,38,44,44,44,44,44,36,38,36,44,44,44,38,44,44,44,44,36,36,36,44,32,44,44,44,38,36,44,44,44],3,null,{"problem":47,"audience":55,"pricing":61,"motivation":67,"time_to_build":45,"stack":71,"openness":82,"stage":83,"team_size":84},{"value":48,"source":49,"evidence":50},"Developers struggle with OAuth2 and OpenID Connect and need user login and profile management","commenter",[51],{"id":52,"by":53,"text":54},"29329773","claystraw","Hello, one of the maintainers of https:\u002F\u002Fgithub.com\u002Fory\u002Fkratos (the system used in the blog post) here :) We started Ory Kratos because we saw so many developers struggle with…",{"value":56,"source":49,"evidence":57},"Developers building customer-facing application authentication",[58],{"id":59,"by":53,"text":60},"29330147","Thank you for these questions! First of all I want to say that Ory Kratos is built for customer facing authentication first, so many of the enterprise requirements (e.g. LDAP…",{"value":62,"source":49,"evidence":63},"Ory Cloud hosted option; plans to price by CPU, memory and disk rather than per user",[64],{"id":65,"by":53,"text":66},"29330880","Thank you Sytten, this comment makes me happy because it confirms our bias! MAU pricing has always been my personal enemy. Ory is and never will charge on a MAU basis. Instead,…",{"value":68,"source":49,"evidence":69},"Many developers struggle with OAuth2 and OpenID Connect",[70],{"id":52,"by":53,"text":54},[72,76],{"value":73,"source":49,"evidence":74},"Go",[75],{"id":52,"by":53,"text":54},{"value":77,"source":49,"evidence":78},"PostgreSQL, MySQL, CockroachDB, SQLite supported",[79],{"id":80,"by":53,"text":81},"29330644","With great power comes great responsibility :) Having the flexibility to build persistence yourself is great, it comes at the cost and responsibility of continuously maintaining…","open_source","launched","company",{"praise":86,"objections":110,"requests":140,"questions":169,"alternatives":190},[87,102],{"value":88,"source":49,"evidence":89},"Easy to integrate and delegates hard authentication parts",[90,94,98],{"id":91,"by":92,"text":93},"29330449","joekrill","For those looking for a comparison, this is like an alternative to KeyCloak, except you have to \"bring your own UI\" - which I see as a pro, not a con. I've been evaluating Kratos…",{"id":95,"by":96,"text":97},"29372450","syysilma","Been working on a webapp on-and-off using Kratos for a bit and it is a massive relief to be able to delegate the hard parts of authentication to something else. My only real pain…",{"id":99,"by":100,"text":101},"29330199","chwzr","hi, the nextjs integration looks all promising. Especially how fast it is integrated. I wonder if there is a smart way to automatically verify a session and get user details on…",{"value":103,"source":49,"evidence":104},"Maintainers responsive and helpful",[105,109],{"id":106,"by":107,"text":108},"29334273","chrisMyzel","Ory developers emailed me and offered support after I had just expressed interest into the project with someone they know personally - that's a great experience and I have loved…",{"id":59,"by":53,"text":60},[111,121,128,132],{"value":112,"source":49,"evidence":113},"Per-user (MAU) pricing of Ory Cloud criticised",[114,118],{"id":115,"by":116,"text":117},"29330831","Sytten","If I have a suggestion for the cloud pricing, I would move away from the per user model that every competitor uses. It is a non-starter for all the B2C startups where a user…",{"id":119,"by":116,"text":120},"29335160","Everything that is per user is a non-starter in my book. Because the vast majority do 1-2 API calls to login once, are considered active and then never login again during the…",{"value":122,"source":49,"evidence":123},"Unclear whether self-hosting is fully possible without Ory Cloud",[124],{"id":125,"by":126,"text":127},"29330048","rapnie","I found it hard to quickly determine whether Kratos can run completely self-hosted, or that there's always some connection to Ory \u002F Ory Cloud services.",{"value":129,"source":49,"evidence":130},"Docs and JS SDK are rough and lack documentation",[131],{"id":95,"by":96,"text":97},{"value":133,"source":49,"evidence":134},"No SAML 2.0 support yet and no enterprise IAM or LDAP",[135,139],{"id":136,"by":137,"text":138},"29331141","mooreds","> - Do you support SAML 2.0 clients? There be dragons. (Disclosure: I work for FusionAuth.) Funny story. We had a client doing a SAML integration using HTTP-redirect bindings. It…",{"id":59,"by":53,"text":60},[141,151,161],{"value":142,"source":49,"evidence":143},"Clearer pricing and usage-based pricing instead of per user",[144,148],{"id":145,"by":146,"text":147},"29330959","bsid","MAU pricing is terrible! love this idea. Heads up, I don't quite get this from your pricing page at all right now.. It says \"First 900 free\" and \"First 100 free\" without any…",{"id":149,"by":116,"text":150},"29335194","I suggested that because the pricing page said 900 free users and that got me worried. Glad to see you are moving in the right direction! I think you might want to try the API…",{"value":152,"source":49,"evidence":153},"Better docs and examples combining Kratos and Hydra",[154,158],{"id":155,"by":156,"text":157},"29331598","prpl","It would be nice if you could get some polish on some no-code examples of kratos and hydra working together, beyond a branch in an example app repository",{"id":159,"by":137,"text":160},"29329868","Pretty cool. Just a heads up, the links in the section: \"build your own login, registration, account settings, account verification (e.g. email, phone, activate account), account…",{"value":162,"source":49,"evidence":163},"Multi-tenant support and customizable login flows",[164,168],{"id":165,"by":166,"text":167},"29330007","mjepronk","Thank you for working on this interesting open source product. I have some questions: - Is it possible to have multiple organizations in one single instance? Can I have some…",{"id":159,"by":137,"text":160},[170,174,186],{"value":171,"source":49,"evidence":172},"Can it be fully self-hosted without Ory Cloud",[173],{"id":125,"by":126,"text":127},{"value":175,"source":49,"evidence":176},"How does it compare to NextAuth, Keycloak and Passport",[177,181,185],{"id":178,"by":179,"text":180},"29329819","arbobmehmood","Looks neat. Will definitely check this out. May I know, how is this different from NextAuth?",{"id":182,"by":183,"text":184},"29329772","kovek","Does passport do something similar?",{"id":91,"by":92,"text":93},{"value":187,"source":49,"evidence":188},"Does it support SAML and delegation to providers like ADFS",[189],{"id":165,"by":166,"text":167},[191,198,202,209,215],{"value":192,"source":49,"evidence":193},"NextAuth",[194,195],{"id":178,"by":179,"text":180},{"id":196,"by":53,"text":197},"29329948","I have not used NextAuth, so take my analysis with caution. As far as I can tell, NextAuth is similar to Passport.js as it offers many adapters to sign in with different…",{"value":199,"source":49,"evidence":200},"Keycloak",[201],{"id":91,"by":92,"text":93},{"value":203,"source":49,"evidence":204},"Passport.js",[205,206],{"id":182,"by":183,"text":184},{"id":207,"by":183,"text":208},"29347666","I thought passport has libraries for the web server also",{"value":210,"source":49,"evidence":211},"Clerk",[212],{"id":213,"by":53,"text":214},"29331037","Clerk (your profile says you're CTO) has a per-user pricing though? Or are you planning on changing it? > It says \"First 900 free\" and \"First 100 free\" without any indication of…",{"value":216,"source":49,"evidence":217},"Gluu",[218],{"id":219,"by":220,"text":221},"29333355","oliveralbertini","What's the diff with Gluu https:\u002F\u002Fgluu.org\u002F ?",{"comments":36,"answered":36,"key":223},[],{"commenters":225,"max_depth":226,"maker_replies":36,"first_comment_mins":225,"lifespan_hours":227},22,8,103,[229,231,233,235,236,240,242,244,248,251,253,254,256,258,260,262,263,265,268,269,273,275,276,278,279,281,283,285,288,291,293,294,297,298,300,304,306,310,313,314,316,318,320,322,325,327,329,331,333],[91,36,32,230,92,36],"project\u002Fpositive\u002Fnone",[52,38,44,232,53,36],"maker\u002Fneutral\u002Fnone",[165,38,44,234,166,36],"project\u002Fneutral\u002Fnone",[59,38,44,234,53,36],[237,38,44,238,239,36],"29334726","project\u002Fneutral\u002Fdocs","saintfiends",[241,38,44,234,166,36],"29340218",[136,38,38,243,137,36],"project\u002Fcritical\u002Fexecution",[245,38,44,246,247,36],"29330751","project\u002Fneutral\u002Fprivacy","dotancohen",[249,38,36,250,53,36],"29331183","commenter\u002Fneutral\u002Fnone",[252,38,36,250,247,36],"29332206",[125,30,44,246,126,36],[255,30,44,234,53,36],"29330103",[115,30,38,257,116,36],"project\u002Fcritical\u002Fpricing",[65,30,44,259,53,36],"project\u002Fneutral\u002Fpricing",[145,30,44,261,146,36],"project\u002Fmixed\u002Fpricing",[213,30,44,259,53,36],[264,30,44,259,146,36],"29333342",[266,30,44,259,267,36],"29336628","rad_gruchalski",[149,30,44,259,116,36],[270,30,36,271,272,36],"29336448","commenter\u002Fneutral\u002Fpricing","Aeolun",[274,30,44,259,137,36],"29331204",[119,30,38,257,116,36],[277,30,36,250,137,36],"29337823",[155,30,44,238,156,36],[280,30,44,234,53,36],"29332003",[282,30,44,246,92,36],"29330499",[159,44,38,284,137,36],"project\u002Fcritical\u002Fdocs",[286,44,44,287,53,36],"29330030","project\u002Fneutral\u002Fdesign",[95,289,44,290,96,36],4,"project\u002Fmixed\u002Fdocs",[178,32,44,292,179,36],"project\u002Fneutral\u002Fidea",[196,32,44,292,53,36],[295,32,44,234,296,36],"29330384","p2hari",[80,32,44,234,53,36],[299,32,36,250,296,36],"29333647",[301,32,36,302,303,36],"29330552","other\u002Fneutral\u002Fnone","littlecranky67",[305,32,36,250,53,36],"29330947",[307,308,44,238,309,36],"29337365",6,"d0100",[106,311,32,312,107,36],7,"maker\u002Fpositive\u002Fnone",[219,226,44,234,220,36],[99,315,44,234,100,36],9,[317,315,44,234,53,36],"29330215",[319,315,44,234,100,36],"29330323",[321,315,38,284,146,36],"29330496",[323,315,36,271,324,36],"29333216","boneabcd",[326,315,36,250,146,36],"29337522",[328,315,44,234,53,36],"29330723",[182,330,44,292,183,36],10,[332,330,44,292,53,36],"29329791",[207,330,44,234,183,36],[],[336,341,346,351,356,360],{"id":337,"name":338,"points":339,"category":340},"29278180","Pony",693,"consumer_social",{"id":342,"name":343,"points":344,"category":345},"29288618","Cleanvoice",221,"creative",{"id":347,"name":348,"points":349,"category":350},"29305643","Repl (CheerpX demo)",171,"dev_tools",{"id":352,"name":353,"points":354,"category":355},"29284296","WildCard",101,"languages",{"id":357,"name":358,"points":359,"category":350},"29321748","Tamagui",88,{"id":361,"name":362,"points":363,"category":364},"29313350","Retrocomputing with Clash",80,"learning_science",false,"v2",{"id":368,"name":5,"line":6,"ai":365,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":36,"top":18,"kw":369,"maker":11,"domain":10,"tier":19,"attempts":36,"strip":370,"url":9,"mix":371,"praise":88,"objection":112,"sub":21},29329610,[21,24,25,26],"5333313033133333010333133330003533310333",[30,31,30,32],1794036613491]