Open source AWS Cognito alternatives

Keycloak: Open-source identity and access management

“I share the same positive experience I read in this thread about Keycloak. Over the years it saved me a huge amount of time that I would have otherwise spent reinventing the wheel. Many thanks to the development team for building such awesome software. One feature that stands…”

Keycloak: Open-source identity and access management

“By sits in front of I mean that it's a completely separate web application rather than a framework, library or proxy that is somehow bundled with your application. Whenever you want someone authenticated you redirect the user's browser to Keycloak. Keycloak will redirect the…”

Authelia is an open-source authentication/authorization server with 2FA/SSO

“However, Authelia... is not an OAuth or OpenID Connect provider yet (planned in the roadmap) is not a SAML provider yet. does not support authentication against an OAuth or OpenID Connect provider yet. does not support authentication against a SAML provider yet. does not support…”

Authelia is an open-source authentication/authorization server with 2FA/SSO

“One of the Authelia devs here, we support a variety of methods of deployment as mentioned by a user below and include a systemd unit. If there is any deployment scenario you feel we've not accounted for that you prefer then we'd be more than willing to look at implementing it.”

Need to set NEXTAUTH_URL dynamically as an Option for multi-domain/multi-tenant use

“**Your question** How to dynamically work with Passwordless/Email auth, without setting NEXTAUTH_URL. **What are you trying to do** I am working on a use-case where NEXTAUTH_URL is not fixed at deploy-time or build-time, but run-time, for a multi-domain (single codebase)…”

Request timed out error while using Google provider

“### Description 🐜 After following the docs for Prisma Adapter and Google Provider, I added auth to my repo, but when trying to log in through google auth, it's timing out for some reason. ![image]( I even tried with a longer timeout, but still no luck :( ```js providers: […”

getting "Can't verify CSRF token authenticity" even if csrf toke in present

“I'm doing simple authentication (without ajax or api) and getting error for csrf authenticity token. I'm using latest version of rails and devise check the post request below ``` Parameters: {"utf8"=>"✓", "authenticity_token"=>"SJnGhXXUXjncnPhCdg3muV2GYCA8CX2LVFV78pqddD4=",…”

True ORM-agnosticism: There should be a clear and simple API requirement for models, like how action_pack has active_mod

“Right now, devise pretends to be ORM-agnostic by having a lib/devise/orm/ directory with ORM implementations, but interfaces with the ORM in an ActiveRecord-specific manner, using the find(_) and update_attributes(_) methods and assuming an ActiveRecord-like hooks API. Instead,…”

Casbin: An authorization library that supports authz models like ACL, RBAC, ABAC

“We're actively evaluating this, particular b/c: Open, dynamic acl+rbc = modern google-docs-style policies for regular webapps, postgres adapters = no change in operations (vs keycloak, orly, ..). That's been a fairly unique combo. However, we're still doing our own eval because…”

Casbin: An authorization library that supports authz models like ACL, RBAC, ABAC

“Some factors where merely psychological, such a mistrust due to misleading partners listed in the website that should use the lib. For instance one logo is the one of SpaceX, which sadly is just a user group, nothing official. Another mention is Google which I didn’t find any…”

Hydra: A lightweight OS X window manager with a powerful API

“I'm not sure I fully agree. For example > Hydra must be stable. It should never crash It's clearly better to have an app that never crashes than an equivalent one that crashes all the time. However, making sure that your app is 100% crash-free isn't a zero cost thing. It takes…”

Hydra: A lightweight OS X window manager with a powerful API

“This thread really does show the best of Hacker News. I wandered in here intrigued by Hydra and ended up checking out 3 or 4 open-source pieces of software that do similar things thanks to recommendations here. The choice is absolutely brilliant. I love seeing so many…”

Casdoor: Open-source IAM and SaaS management solution

“Casdoor is a promising open-source IAM solution: , written in Go and React. All features like OIDC, OAuth 2.0, SAML, CAS, LDAP, WebAuthn and 2FA are all supported. SaaS management is also supported like pricing, subscription etc. Source code: Compared to Keycloak, Casdoor has:…”

Show HN: Ory Kratos – Open-source identity server written in Go

“That'd depend on the implementation details. Within the Ory ecosystem, you have Kratos (identity management), Hydra (OAuth2 & OIDC server, dealing mostly with token issuance, not so much with identities, which you have to provide externally) and Oathkeeper (API gateway). For…”

Show HN: Ory Kratos – Open-source identity server written in Go

“> 1. Ory Kratos provides session-based authentication and user management. > > 2. Ory Hydra is a self-managed server that secures access to your applications and APIs with OAuth 2.0 and OpenID Connect. Sounds about right. > 1. Bugs around traits meant we had issues around…”

Using two yubikeys not covered under guide

“So, this might require more feedback, as am currently flummoxed. If you want to use a Yubikey for Windows / MacOS / Linux login as part of a multi-factor authentication, then Yubico advises having a second Yubikey as backup. This works fine, since I can use a Yubikey Nano for…”

evaluate materials backup strategy

“Any particular reason not to use tar+gpg for backups? LUKS seems error-prone compared to a single command of encrypting a folder. Thank you for the guide, by the way.”

Using JWTGuard with Laravel 5.3.x "Guide"

“Okay, I've got a bit of time, and need to set up a new project with Laravel 5.3 and JWTGuard. @tymondesigns I hope you don't mind this being in your issues similar to my other "guide" (#513), and if so I can try and find a different spot, but I don't write blogs or tutorials.…”

Laravel 5.5 + Vue.js 2 + JWT Auth 1.0.0-rc.1

“Since I lost tons of time doing **tymon/jwt-auth** work in my application, I decided to share my code in this walkthrough. **FOR LARAVEL:** Add `"tymon/jwt-auth": "1.0.0-rc.1"` to **composer.json** and run `composer update` Add the service provider to the providers array in…”

Improve ease of integration for 3rd party REST/JSON APIs

“Hello guys, I am using django allauth in a variety of application that i make and its awesome! Right now, I am trying to develop a login process in two separate steps. I have a client(mobile) social login with some provider(twitter, Facebook) and the client takes the oauth…”

Login using code (was: Magic Link Login)

“Logging in with a magic link like on [slack ]( [here](”

Show HN: Nhost – Open source Firebase alternative with GraphQL

“Every Nhost project runs on open source software: - Database (PostgreSQL) - GraphQL API (Hasura) - Auth & Storage (Hasura Backend Plus) - Storage server (Minio) You can read more about self hosting here: We automatically configure and host these open source softwares as part of…”

Show HN: Nhost – Open source Firebase alternative with GraphQL

“100% yes. If you want to leave Nhost for some reason we'll help you with that. We already helped one customer in India doing this. They are a consultant agency and their customer had a requirement to be on AWS (We currently use Digital Ocean).”

Easy Rails OAuth integration testing with Omniauth and Capybara

“Proper in this case: OmniAuth abstracts away the actual OAuth process and, as is always proper, you should be testing your application code not your libraries.”

Easy Rails OAuth integration testing with Omniauth and Capybara

“I recently started using Omniauth & Capybara like this. It seems to work easily enough even for a relative testing novice like me.”

deepstream.io client for C / C++

“Create a deepstream.io client for C / C++, that connects to deepstream via TCP and supports Authentication, Permissioning, Records, Events and RPCs. It might make sense to take IoT (Arduino etc.) compatibility into account for the design. **Great resources to get started:**…”

deepstream.io client for Python

“Create a deepstream.io client for Python, that connects to deepstream via TCP and supports Authentication, Permissioning, Records, Events and RPCs. **Great resources to get started:** [Writing a deepstream client]( [Deepstream Messaging structure]( [Detailed Cucumber Specs for…”

go-grpc-middleware.v2: Action Plan.

“Hi :wave: We have tons of stuff to improve in this library and there wasn't really time for this. Let's do it finally! Let's maintain this issue as a single place to track our work. :muscle: cc @domgreen @johanbrandhorst @mwitkow The plan is to start from scratch in the `v2`…”

CSRF in Doorkeeper OAuth2 gem

“While I believe that allowing CSRF is terrible practice, as a user of Doorkeeper, I think the problem here is Digital Ocean's atypical usage of OAuth2. When you request an access token for a resource owner in OAuth2, you are supposed _actually authenticate_ the owner. According…”

CSRF in Doorkeeper OAuth2 gem

“This is pretty bad, but I believe it is only possible to get an access token if you also allow malicious/non-trusted users to either create new OAuth client registrations (`Doorkeeper::Application` models) or modify the redirect URI of an existing OAuth client registration. The…”