Hacker News Reader

Comment by Greek0 | Hacker News Reader

The author praises Firebase Auth for its ease-of-integration, but I'm leery of depending on Google products due to its support horror stories.

Can anyone recommend good, easy-to-integrate alternatives?

View on HN

I came across Appwrite[0], when looking for open source Firebase alternatives.

It has a long list of supported OAuth2 providers [1].

It worked for me out out the box (DO docker image), and seems to be progressing well. They have some beta Svelte libraries, and it was simple enough to integrate for my uses.

No affiliation, just happy to have found it.

0: appwrite.io 1: https://appwrite.io/docs/client/account?sdk=web#accountCreat...

I've always wanted to try Auth0 and I've heard great things! I would love to hear if anyone has had a positive experience with Auth0 as well.

Positive exp with auth0, though if you can afford to control this stuff yourself maybe I'd lean that way.

Another positive experience with Auth0, if a little finicky in my usecase (using it as a SAML IDP for testing).

They have recently been bought out by Okta... Which by some accounts might not be a good move.

My experience is that if you use it how they want you to use it (as a separate page hosted by them) then it’s simple and easy to use, but if you want to embed it they go out of your way to make your life painful. We took the latter route since we care about our UX and probably would have been better off if we just rolled it all ourselves.

Do you need social logins? If not (and you just want email/password login) then implement it yourself. Auth isn't hard, and Firebase Auth doesn't provide you much in terms of managing roles/permissions or anything like that.

> Auth isn't hard

... :-|

Authentication/Authorisation (AuthZ) is hard, brother. Implementing what you think looks like AuthZ is easy, but making sure you've got all possible avenues covered is hard.

Getting AuthZ correct and having everything covered is hard.

Security is hard.

Source: see the entire field of security and all the companies, products and services that have been invented to try and solve this problem.

Auth0. I use it on all side projects and in production at work.

We actually started with Firebase Auth (branded as Google Identity) and moved to Auth0 later for some small differences.

Also though, Auth0 was just acquired by Okta, if that matters to you.

Have been using firebase for years without significant hiccups. I was wary at first but I'm glad I moved over it. Support is strong if you have a paid plan and their documentation is fenomenal.

Check out https://www.clerk.dev/

Can promise good support over at Clerk ;) We are new, and are trying to provide an easier, more comprehensive authN/authZ/user management solution. We're also taking requests for individual use cases as we're ramping up!

Happy to answer any questions.

Supabase is in beta but it’s even easier and more performant (and open source) https://supabase.io

Reply on news.ycombinator.com