Hacker News Reader

Comment by Alupis | Hacker News Reader

KV Stores aren't magical... and you do need to store this data somewhere.

So what's different between this (or any of these new-aged Auth services) and something else more traditional? If anything, these new-age services make it easier to access your data if you need to, since you often control the backing database unlike auth0, etc.

Both DynamoDB and Cloudflare KV are queriable.

I guess I don't understand the negativity in your comment. If anything, your complaint sounds like an issue you and your team cooked up on your own.

View on HN

I don’t think it’s the architecture or technology the commenter is reacting to, it’s this line: “You should never need to directly access any data that is stored in there.”

Statements like that are a huge red flag that the designers of the product are not particularly experienced with operating this type of system at meaningful scale.

Eh, the technology stack they discuss is directly accessible, though.

I read this as an advertisement, meaning if everything it working well you don't need to manage the database. Which is probably how it works 99% of the time in fairness.

The circumstances are immaterial; if the creators of a system are blasé enough to imagine you’ll neither need nor want to manage or query the underlying data storage, then they’re telegraphing naiveté and inexperience. Capacity, throughput, latency, consistency concerns exist in any nontrivial system and the pointy end/bottleneck of these is very often at the level of persistence. Auth services can add privacy and integrity to that pile. And so on. Consequently, glossing over it with a handwave is a bright red flag.

To me this statement read very differently. I read it as saying that the amount of state is small and portable enough that I wouldn’t have to worry about scalability issues or be married to a particular database product. I think the original complaint about it is overly critical and nit picking.

yes this was the intent

99% of the time is a rather high rate of failure .. 1% of a year is still over 3 days. 1% of a million is still a lot of incidents

Sure but you are allowed to put the 99% front and center in marketing.

A good chunk of the other 1% are square-peg-in-round-home situations.

It is good to support all the various edge cases but it is also on 6 to focus on the happy path

> since you often control the backing database unlike auth0, etc.

Auth0 has an option where you can use your own database for identities

Starting at $240 a month...

Reply on news.ycombinator.com