Hacker News new | past | comments | ask | show | jobs | submit login

I recommend SuperTokens https://supertokens.io/



> All other providers require an OAuth implementation even if you do not need SSO because of the way they’ve architected their solution. With SuperTokens, we’ve decoupled the functionality for different use cases, making it possible to only worry about the features you need.

Eh? You’re either doing Oauth or you’re not? What have they decoupled?


For example, if you require email / password auth without SSO, then we do not use open ID connect or any of the oauth flows - because those are not needed in a simple setup.


Not having any 2FA makes it a non-starter for a lot of people.


We're working on it! Passwordless will be our next release in a few weeks and then 2FA comes next


Thanks for the Shoutout!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: