Hacker News Reader

Comment by chrisfosterelli | Hacker News Reader

I've been trying out App Engine for Go the last couple weeks for a side project, but it's been a bit of a headache. Having to use their data store was a little annoying to begin with, but I was able to get past that one. Once I started playing with user accounts I was very frustrated to learn that they only support Google Account login functionality... I have been looking at implementing my own but Go doesn't appear to have a common authentication package and the advice often seems to be "roll your own". Any advice for doing this?

That said, this is the only Go hosting service I could find that has a free tier and their development binaries are very well done!

View on HN

Bit of a shameless plug, but we just announced official support yesterday on Heroku (https://blog.heroku.com/archives/2015/7/7/go_support_now_off...), graduating from our community supported buildpack. We allow you to pick pretty freely which databases and other services you want to you use from our add-ons. We also have a free tier.

Finally if you do give it a try would love to hear any feedback you have.

Hey, great! I've been using Heroku for a Node apps and was sad that deploying Go apps required a custom buildpack. I'll check it out!

Except automatically deciding what buildpack to use, what does it offer more to have official buildpack ?

I mean, when you know about Heroku's buildpacks you have access to all of Heroku raw power.

Buildpacks are definitely worth understanding to get the most out of Heroku, but not having official support is a negative. Also, I can't recall what it was but I did check into the community buildpack and it seemed like more effort than it's worth.

That said, I didn't take a very close look so maybe it was easier than I anticipated!

Personally, I don't put stuff on Heroku because it's costly and inefficient.

Let's say I have a bunch of pet projects and applications I want to run (blog, IRC bouncer, some kind of photo management). They take negligible CPU most of the time and ~128MB RAM each.

If I throw these on Heroku, I have to pay $7/each for 3 separate dynos, for a total of $21. Alternatively I can pay nothing but deal with my stuff being down 25% of the time.

If I throw them on Vultr or DigitalOcean, I pay $5 for a 512MB (768MB on Vultr) box and they all run happily ever after.

Heroku forces me to buy 4x the resources I actually need, which is a huge waste. It'd be nice to share my pool of resources so that if I use 384MB of RAM, I pay for 384MB of RAM or at least only pay for 512MB.

I know it's very unlikely you care about users like me and that's totally fine, I know things like this aren't particularly lucrative. Just thought I'd mention it since you asked about feedback.

Heroku isn't selling blank VMs, though. It's a value-added service -- you don't have to configure servers, build docker images, manage logging, wire up routes, inject service dependencies ... it goes on and on.

PaaSes are expensive if your time is free.

I work for a company which donates enormous engineering resources to an opensource Heroku competitor (Cloud Foundry). As a note, Cloud Foundry lets you specify exactly how much RAM you want to use. You can try it on Pivotal Web Services[0] (hosted by my employers) or BlueMix.

[0] https://run.pivotal.io/

Another shameless plug -- Go has been an officially supported buildpack on Cloud Foundry for more than a year, based on the same buildpack which Heroku have now adopted as official.

You can try it on Pivotal Web Services or BlueMix.

Disclaimer: I was seconded to the Cloud Foundry buildpacks team for ~7 months.

If you're okay with OAuth providers then https://github.com/markbates/goth gives you the capability to handle more than just Google accounts.

Otherwise, you're right in that there doesn't exist a 'de facto' auth package for Go like Devise in the Rails world. Part of this is because you can't rely on stuff like ActiveRecord, ActionController, etc. to do some of the heavy lifting for you (Go being just a language, not a framework on its own).

FWIW, I'm partway through writing a concise cookie- (and optionally Redis-) backed store that effectively asks you to provide a `User` type that can satisfy `GetID() string` and `IsAdmin() bool` methods. The middleware/lib does most of the work once you call `mypkg.SetUser(yourusertype)` in your login handler.

This obviously doesn't cover features such as password reset emails, user registration, etc because you either have to make a ton of assumptions about your users' design/implementation, keep things limited, or fall into the trap of "provide options for every possible use case".

PS: Ping me via email if you want some guidance. Happy to share some code snippets and/or input as I've been down the roll-my-own path a couple of times already.

Will do, thanks!

I have been a python appengine user for last 2-3 years. It is really useful to get a prototype out fast.

But MAJOR MAJOR MAJOR Painpoints are:

- User : only google account supported

- email : only can use <appid>@appspotmail.com

- Image upload support

otherwise very nifty to get a site out in less than a day!

Can you not use the REST API of Postmark, Sendgrid, etc?

What do people mean by "only google account supported", I've been building a web app with app engine and I just ran my own auth using passlib and it's worked fine. I also don't see how they can prevent you from adding oauth from different services onto your app.

The problem I ran into was that with python you could only use certain native libraries provided by google. To use third part unsupported libraries in python you had to do a hack where you submit them with the app but I managed to get it working with a bit of fiddling.

Presumably, he means the built in Users service only supports Google Accounts [0].

[0] Though this is true only in terms of stable features; it does have experimental support for OpenID identifiers.

> User : only google account supported

Isn't google account support one account more than you'll get at AWS or Heroku or anywhere else? Why is this a MAJOR MAJOR MAJOR painpoint?

> email : only can use <appid>@appspotmail.com

Not true at all. You can use any email address simply by adding it to your permissions list.

> Image upload support

What does this mean? I've built a few photography apps on GAE and had no issues with image upload. What do you mean specifically?

These MAJOR MAJOR MAJOR painpoints aren't work mentioning in the review of a service if they are also MAJOR MAJOR MAJOR painpoints everywhere else.

> These MAJOR MAJOR MAJOR painpoints aren't work mentioning in the review of a service if they are also MAJOR MAJOR MAJOR painpoints everywhere else.

blaincate wasn't doing a full review. They merely provided some very useful observations.

Simmer down. You have been zealously defensive about App Engine throughout this whole comment section.

> They merely provided some very useful observations.

Except they're false. False claims + Heroku promotion in a GAE announcement thread. Stay classy, people.

There are lots of bad things to say about GAE without peddling nonsense.

They won't let you run any python module with C code... which means you can forget about using BCRYPT or SCRYPT, for example.

Their image manipulation and edge caching service won't handle any photo wider than 1600px.

Domain name management is shit... you have to use Google Apps if you want that.

E-mail is restricted to 100 mails per day. App engine doesn't provide any listed prices for paid accounts. What happens after 100 emails?

Email is only limited to 100/day for free apps.

https://cloud.google.com/appengine/docs/quotas#Mail

No, you have to explicitly request an increase.

See this page: https://cloud.google.com/appengine/docs/quotas#Mail

"The daily email quota for billing-enabled apps depends on which billing system your app is using. See Increasing your Daily Mail Quota below to learn how to increase the quota in each case."

Once you go to the referenced page (https://cloud.google.com/appengine/docs/quotas#up_mail_quota), you find this:

"When you enable billing, the email quota remains at 100 messages per day. You must explicitly request a higher mail quota. Go to the Quota Details page of the Admin Console and scroll to the Mail section. There you'll find a link to submit a request for additional email quota. After you submit the request you can monitor its status by visiting the same link again. This will display a page that shows the status of the request: whether the request has been granted, is under review, or has been denied. If the request is granted it may be several minutes before the new quota of 20,000 messages per day takes effect. If the request is denied you cannot make another request to increase mail quota until some time has passed.

If your app needs to send more than 20,000 messages per day, you can sign up for a support package which entitles you to ask for a higher quota."

So it's not "restricted to 100 mails per day". It's limited to 20,000 per day, and that's only until you sign up for support.

Regarding the email issue, the addresses that you are able to add to the permissions list are very limited.

https://code.google.com/p/googleappengine/issues/detail?id=2...

- I have to search for oAUTH and use it . And having used django user authentication, something similar would be really useful.

- mail : send email on behalf of app users : not supported. Need to integrate with sendgrid or third party libray . native support would be good.

- Image : I could use the blob earlier, but now blobs are deprecated, and need to use google cloud.

I am not regular web developer, so other people may have valid points.

> mail : send email on behalf of app users : not supported. Need to integrate with sendgrid or third party libray . native support would be good.

Could you explain this? You want to send outgoing email with your users email addresses in the FROM field?

> Image : I could use the blob earlier, but now blobs are deprecated, and need to use google cloud.

Could you please explain how this is a bad thing? Doesn't google cloud make things easier and faster?

> And having used django user authentication, something similar would be really useful.

How about exactly that on App Engine, rather than just something similar: https://www.allbuttonspressed.com/projects/djangoappengine

- User: I usually just skip this service and use OAuth + Login management library

- Email: I remember it works with gmail; you can overwrite the "reply-to" header.

- Image Upload: seems to work fine by uploading to blobstore or GCS. Image serving is superb with images.get_serving_url!

Heroku just announced official support for Go as well.

I've hacked together a package targeting the auth/user accounts gap, albeit in a fairly opinionated way. Very rough, but maybe they'll help someone:

https://github.com/likestripes/kolkata //user accounts API

https://github.com/likestripes/calcutta //basic UX

(ping me if you've got an interest or opinion on these!)

The only reason I use AppEngine is because they offer free hosting. I guess we have to pay the price of using proprietary APIs for free stuff.

If cost is your main concern, you can get VPS hosting from a dollar a month.

Is it as reliable as AppEngine?

If you're willing to spend $5/mo then DigitalOcean is a safe bet with excellent reliability. If you're a new customer then google for a Coupon before you sign up (saves you $20).

Don't try to go even cheaper, that way lies madness.

You cant compare AppEngine with DO or Heroku with AWS. Yes, AppEngine is costlier than DO 5-10X is comparing cost of computation power. You pay the price for not having to deal with DevOps, scalability and some cool API/services.

Amazon EC2 has a free teir.

Not if you've already been signed up with them for more than a year.

It may be free for weekend projects but if you're planning to get some serious traffic, prepare for some hefty bills.

I've had App Engine projects that were on Product Hunt and Hacker News for a day, and the bill for those days were close to 0. (it did exceed the free tier, but not by much)

You probably wouldn't want to run Reddit on App Engine, but anything with medium traffic or decent monetization should work out just fine.

The only other caveat is that it may depend on what the app does and how you utilize the datastore. If you don't consider cost of the datastore when building an app, it could end up being expensive like you mentioned.

Our burn rate is about ~$200/day (not month), half of it for datastore ops.

Reply on news.ycombinator.com