[{"data":1,"prerenderedAt":548},["ShallowReactive",2],{"project-37848793":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":45,"post_text":47,"what":48,"said":78,"maker_in_thread":202,"shape":211,"grid":216,"attempts":509,"same_week":510,"maker_shows":37,"maker_hidden":540,"reader_version":541,"card":542},"37848793","Obligator","An OpenID Connect server for self-hosters","title","Show HN: Obligator – An OpenID Connect server for self-hosters","https:\u002F\u002Fgithub.com\u002Fanderspitman\u002Fobligator","github.com","apitman",1697050760,2023,273,122,175,3109,6,"legend","infrastructure","self-hosted auth server","web_app",[24,25,26,27],"openid connect","self-hosted auth","oidc server","passwordless email login","curious",-0.094,{"positive":18,"neutral":31,"mixed":32,"critical":33},21,0,14,41,{"idea":36,"design":39,"docs":40,"privacy":43,"execution":44},{"positive":37,"critical":38},3,2,{"positive":38,"critical":38},{"positive":41,"critical":42},1,4,{"positive":32,"critical":42},{"positive":32,"critical":41},[46,46,32,32,32,32,32,32,37,37,46,41,32,32,32,32,37,37,37,41,41,32,41,41,37,41,37,46,41,41,41,37,32,38,46,37,32,37,41,37],5,null,{"problem":49,"audience":60,"pricing":47,"motivation":69,"time_to_build":47,"stack":76,"openness":77,"stage":77,"team_size":77},{"value":50,"source":51,"evidence":52},"Self-hosted apps need simple login without heavy OIDC servers or client pre-registration","maker",[53,57],{"id":54,"by":55,"text":56},"37850256","benkillin","This looks like exactly what I was looking for. I was looking for turnkey AuthN\u002FAuthZ using OIDC for closed networks and self hosting, turnkey as in being able to drop a…",{"id":58,"by":11,"text":59},"37850462","> why on earth are we assuming that a self-hoster who can setup her own IDP cannot also create this app registration herself, and add a client_id\u002Fsecret to a configfile before…",{"value":61,"source":62,"evidence":63},"Self-hosters and people running internal tooling","commenter",[64,65],{"id":54,"by":55,"text":56},{"id":66,"by":67,"text":68},"37853023","TrickardRixx","I'm looking for something that can federate identity, i.e. allow login with the @company microsoft identity provider, or support a users table, and ideally allows linking them. I…",{"value":70,"source":51,"evidence":71},"Wanted simple self-hosted auth without client registration and ad-company social login",[72,73],{"id":58,"by":11,"text":59},{"id":74,"by":11,"text":75},"37853358","The UX challenges are real, no doubt about that. That's actually one of the main reasons I started down the OIDC rabbit hole. I was using only passwordless email logins on my…",[],"unknown",{"praise":79,"objections":99,"requests":129,"questions":140,"alternatives":155},[80,92],{"value":81,"source":62,"evidence":82},"Turnkey, lightweight alternative to Keycloak and Dex",[83,84,88],{"id":54,"by":55,"text":56},{"id":85,"by":86,"text":87},"37853298","cchance","i think most people look at keycloak, and just feel overwhelmed, but that seems to be the case for OIDC in general, they always feel insanely heavy, something like this with a…",{"id":89,"by":90,"text":91},"37849898","throwaway67743","Ohh, looks extremely promising, I've been after something with a bit more flexibility than Dex while not being Keycloak\u002FJava etc, an LDAP backend would be awesome as well though…",{"value":93,"source":62,"evidence":94},"Registration-free anonymous clients are a brilliant idea",[95],{"id":96,"by":97,"text":98},"37854390","hkt","Genius. Not having to register is brilliant and I love it. I'll be watching this project and using it.",[100,111,118],{"value":101,"source":62,"evidence":102},"Email magic links are less secure than other login methods",[103,107],{"id":104,"by":105,"text":106},"37852031","jupp0r","Using email magic links as authentication mechanism is not a great choice in my opinion as email is not a very secure protocol if you think about the default smtp security…",{"id":108,"by":109,"text":110},"37852803","v2223943777435","just because email is often the defacto identity on the internet doesn't make it a good idea (bandwagon fallacy). i don't consider email tokens to be a serious form of…",{"value":112,"source":62,"evidence":113},"Security claims in the README are overstated",[114],{"id":115,"by":116,"text":117},"37852094","AceJohnny2","> By forcing the user to decide whether they trust the actual domain where the ID token will be sent, and not displaying any sort of logo which can be faked, security is…",{"value":119,"source":62,"evidence":120},"Comparison table is inaccurate for some projects",[121,125],{"id":122,"by":123,"text":124},"37854832","Wronnay","Cool, but I looks like the creator didn't really look deep in the competition. Many of the question marks in the comparison table can be replaced by a checkmark.",{"id":126,"by":127,"text":128},"37850376","dizhn","I am only familiar with authentik. When I look at the comparison table it's super inaccurate for authentik. FYI.",[130,134],{"value":131,"source":62,"evidence":132},"LDAP backend support",[133],{"id":89,"by":90,"text":91},{"value":135,"source":62,"evidence":136},"SQLite support",[137],{"id":138,"by":11,"text":139},"37858528","The race really does seem to be between ZITADEL and Ory for the next generation of OIDC servers. Any chance of sqlite support in the future?",[141,148],{"value":142,"source":62,"evidence":143},"Which services can use it as an IdP without registration",[144],{"id":145,"by":146,"text":147},"37850161","stavros","Can someone explain which services this is supposed to be an IdP for? As far as I know, services need to have the OIDC service registered (ie I can't just auth with this to…",{"value":149,"source":62,"evidence":150},"How it differs from Portier",[151],{"id":152,"by":153,"text":154},"37854561","kosinus","This looks like it has the same core functionality as Portier? https:\u002F\u002Fgithub.com\u002Fportier\u002Fportier-broker I'm on mobile, so haven't really checked where we differ in details.",[156,166,177,184,194,198],{"value":157,"source":62,"evidence":158},"Authelia",[159,162],{"id":160,"by":11,"text":161},"37850431","If you're looking for something but more production ready, Authelia seems like a good option. Vouch and oauth2-proxy are even simpler but more specific in what they do. If you…",{"id":163,"by":164,"text":165},"37853854","moontear","I was going to comment „but I can already do a lot of that with Authelia and it is very simple to configure“, but then I found your very good comparison page - good comparison! I…",{"value":167,"source":62,"evidence":168},"Keycloak",[169,173],{"id":170,"by":171,"text":172},"37853063","snappysnap","How about KeyCloak? We use it for OIDC and it's feature rich with support for private key signing and back channel logout. https:\u002F\u002Fwww.keycloak.org\u002Fdocs\u002Flatest\u002Fsecuring_apps\u002F",{"id":174,"by":175,"text":176},"37850940","KronisLV","Personally I went with Keycloak, because it's fairly well documented and also has Docker images available: https:\u002F\u002Fwww.keycloak.org\u002Fgetting-started\u002Fgetting-started-docker…",{"value":178,"source":62,"evidence":179},"Dex",[180],{"id":181,"by":182,"text":183},"37851327","salzig","Reminds me of https:\u002F\u002Fgithub.com\u002Fdexidp\u002Fdex",{"value":185,"source":62,"evidence":186},"Ory Hydra and Kratos",[187,191],{"id":188,"by":189,"text":190},"37851436","sisve","I was expecting hydra \u002F kratos to show up as an alternative.. but did not see any. Does any have any experience, good or bad about it? https:\u002F\u002Fgithub.com\u002Fory\u002Fkratos",{"id":192,"by":11,"text":193},"37853395","The Ory stack looks to be very high quality for sure. But so far in this thread there's been mentioned Hydra, Kratos, and Oathkeeper in order to run an OIDC server. You say Hydra…",{"value":195,"source":62,"evidence":196},"ZITADEL",[197],{"id":138,"by":11,"text":139},{"value":199,"source":62,"evidence":200},"Authentik",[201],{"id":126,"by":127,"text":128},{"comments":203,"answered":204,"key":205},32,9,[206,207,208],{"id":160,"text":161},{"id":138,"text":139},{"id":209,"text":210},"37860722","> I think both products could even coexist Fair enough, but developers and sysadmins don't want to choose between two great options. They want one obvious best option and a…",{"commenters":212,"max_depth":213,"maker_replies":203,"first_comment_mins":214,"lifespan_hours":215},57,10,94,134,[217,219,221,223,224,226,228,231,235,238,240,243,246,248,251,253,254,256,257,259,261,263,266,269,272,276,279,282,285,287,289,292,293,296,299,302,304,307,310,312,314,316,319,321,323,326,328,331,334,336,338,340,342,344,346,348,350,352,354,358,360,363,365,367,369,372,374,376,380,381,383,387,390,393,396,398,399,401,404,406,409,411,414,416,417,419,423,425,428,430,431,433,435,436,440,443,445,447,449,451,453,456,459,462,463,465,469,471,473,476,477,479,481,485,487,490,493,495,499,502,505],[54,32,46,218,55,32],"project\u002Fpositive\u002Fidea",[160,32,32,220,11,41],"maker\u002Fneutral\u002Fnone",[66,32,32,222,67,32],"commenter\u002Fneutral\u002Fnone",[170,32,32,222,171,32],[85,32,46,225,86,32],"project\u002Fpositive\u002Fdesign",[227,32,32,222,67,32],"37854076",[229,32,32,222,230,32],"37858100","cdaven",[232,32,32,233,234,32],"37857733","other\u002Fneutral\u002Fnone","lakomen",[236,32,32,233,237,32],"37859780","neonsunset",[239,32,32,233,234,32],"37860384",[241,32,32,233,242,32],"37861170","ffo",[244,32,32,233,245,32],"37853375","RealStickman_",[247,32,32,233,67,32],"37854082",[249,32,32,233,250,32],"37855855","bennyp101",[252,32,32,233,242,32],"37856360",[138,32,32,233,11,41],[255,32,32,233,242,32],"37858682",[209,32,32,233,11,41],[258,32,32,233,242,32],"37860971",[260,32,32,233,11,41],"37862322",[262,32,32,233,67,32],"37862292",[264,32,32,233,265,32],"37858018","mooreds",[267,41,32,233,268,32],"37855061","jinnko",[270,41,32,233,271,32],"37856664","__float",[273,38,37,274,275,32],"37850034","project\u002Fneutral\u002Fdocs","kekub",[277,38,37,274,278,32],"37850121","jackson1442",[280,38,37,274,281,32],"37850158","camsjams",[283,38,32,284,11,41],"37850214","maker\u002Fneutral\u002Fdocs",[152,37,37,286,153,32],"project\u002Fneutral\u002Fidea",[288,37,32,233,11,41],"37858669",[290,37,37,291,153,32],"37879927","project\u002Fneutral\u002Fprivacy",[89,42,46,218,90,32],[294,42,32,233,295,32],"37849988","bo0tzz",[297,42,41,298,90,32],"37850218","project\u002Fcritical\u002Fdocs",[300,42,32,233,301,32],"37850276","jauntywundrkind",[303,42,32,222,90,32],"37850795",[305,42,32,222,306,32],"37851891","codegeek",[308,42,32,233,309,32],"37855934","BodyCulture",[311,42,32,233,90,32],"37859455",[313,42,32,233,11,41],"37860769",[315,42,32,233,90,32],"37860937",[317,42,32,233,318,32],"37862602","eriksjolund",[320,42,32,233,11,41],"37863044",[322,42,32,233,318,32],"37863395",[324,42,32,233,325,32],"37850212","XorNot",[327,42,32,233,90,32],"37850976",[329,42,32,233,330,32],"37852926","grepfru_it",[332,42,32,233,333,32],"37852716","rescbr",[335,42,32,233,309,32],"37855950",[337,42,32,233,333,32],"37861732",[339,46,37,286,265,32],"37858095",[341,46,32,286,11,41],"37858349",[343,18,37,291,234,32],"37857909",[345,18,32,291,11,41],"37858478",[347,18,32,222,234,32],"37860372",[349,18,32,220,11,41],"37860751",[145,351,37,286,146,32],7,[353,351,37,286,281,32],"37850224",[355,351,41,356,357,32],"37850675","project\u002Fcritical\u002Fprivacy","omneity",[359,351,32,222,11,41],"37860020",[361,351,41,362,357,32],"37912426","project\u002Fcritical\u002Fexecution",[364,351,32,286,11,41],"37850282",[366,351,37,286,146,32],"37850511",[368,351,32,286,11,41],"37850650",[370,351,32,371,146,32],"37850854","other\u002Fneutral\u002Fidea",[373,351,32,286,11,41],"37851130",[375,351,32,371,146,32],"37851467",[377,351,41,378,379,32],"37850291","project\u002Fcritical\u002Fidea","Msurrow",[58,351,32,286,11,41],[122,382,41,298,123,32],8,[384,382,41,385,386,32],"37855808","project\u002Fcritical\u002Fnone","langur",[388,382,32,389,309,32],"37855900","commenter\u002Fneutral\u002Fdocs",[391,382,37,392,386,32],"37856228","project\u002Fneutral\u002Fnone",[394,382,32,395,11,41],"37859993","commenter\u002Fneutral\u002Fidea",[397,382,32,274,11,41],"37860013",[126,204,41,298,127,32],[400,204,32,274,11,41],"37850403",[402,204,41,298,403,32],"37850851","mynameisvlad",[405,204,32,286,11,41],"37851024",[407,204,37,392,408,32],"37851662","dugite-code",[410,204,37,392,403,32],"37853625",[412,204,32,371,413,32],"37854718","Borealid",[415,204,37,274,127,32],"37850888",[96,213,46,218,97,32],[418,213,32,286,11,41],"37860040",[420,421,37,392,422,32],"37850296",11,"I_am_tiberius",[104,424,41,356,105,32],12,[426,424,32,395,427,32],"37852073","KRAKRISMOTT",[429,424,32,395,11,41],"37852249",[108,424,41,356,109,32],[432,424,32,286,11,41],"37852983",[434,424,41,378,109,32],"37853233",[74,424,32,286,11,41],[437,424,32,438,439,32],"37854186","commenter\u002Fneutral\u002Fprivacy","xg15",[441,424,37,286,442,32],"37852331","Phrodo_00",[444,424,32,286,11,41],"37853363",[446,424,32,371,442,32],"37853382",[448,424,32,286,11,41],"37853554",[450,424,32,395,442,32],"37853635",[452,424,41,356,105,32],"37863342",[454,424,37,286,455,32],"37852392","brazzledazzle",[457,424,37,286,458,32],"37853352","JambalayaJim",[163,460,46,461,164,32],13,"project\u002Fpositive\u002Fdocs",[174,33,32,233,175,32],[464,33,32,371,11,41],"37851109",[466,467,32,233,468,32],"37851142",15,"Havoc",[188,470,37,392,189,32],16,[472,470,32,274,11,41],"37851559",[474,470,32,222,475,32],"37853187","hatf0",[192,470,32,222,11,41],[478,470,32,222,475,32],"37866958",[480,470,32,222,11,41],"37869840",[482,483,37,392,484,32],"37853587",17,"krantic",[486,483,32,274,11,41],"37869872",[115,488,41,489,116,32],18,"project\u002Fcritical\u002Fdesign",[491,488,32,492,11,41],"37852222","project\u002Fneutral\u002Fdesign",[181,494,37,392,182,32],19,[496,497,32,233,498,32],"37853982",20,"6r17",[500,31,46,225,501,32],"37850738","Lammy",[503,31,41,489,504,32],"37851383","throwawaaarrgh",[506,507,32,222,508,32],"37854336",22,"BOOSTERHIDROGEN",[],[511,516,521,525,530,535],{"id":512,"name":513,"points":514,"category":515},"37835995","eliot.blog",537,"creative",{"id":517,"name":518,"points":519,"category":520},"37782513","store",484,"web_saas",{"id":522,"name":523,"points":524,"category":520},"37818374","momo.coach",307,{"id":526,"name":527,"points":528,"category":529},"37792507","Rolepad",294,"productivity",{"id":531,"name":532,"points":533,"category":534},"37789371","extra-screen",281,"dev_tools",{"id":536,"name":537,"points":538,"category":539},"37797606","DotBigBang",269,"games",false,"v2",{"id":543,"name":5,"line":6,"ai":540,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":544,"top":18,"kw":545,"maker":11,"domain":10,"tier":19,"attempts":32,"strip":546,"url":9,"mix":547,"praise":81,"objection":101,"sub":21},37848793,-0.09,[24,25,26,27],"5500000033510000333110113135111302530313",[18,31,32,33],1794036643153]