notlive

I would like the option to allow the behaviour selectively

Referrer is sometimes nice to know. If your site gets a traffic spike from an email newsletter that traffic won't correctly identify the source in the http headers.

No qualms with OP, your site your rules.

The article says they received a list of known NK hackers' emails in advance and the hacker used one of those addresses to apply. Pretty big red flag there if you ask me. Is it really unfair to halt the process at that point?

It's all fair criticism. The lessons learned will only take you so far, so the caveat is that if you think it's a bad project then you're already above a certain level. Go you :) You might take it in the context that they are shipping a real product at a fair speed so where it deviates from ideal what you're seeing is the educated choices of the tradeoffs to make in a real business (which is a statement of the plane team's opinion, yours may vary).

The Plane codebase is a good read. If you want to see a well put together Django + Nextjs project you should check it out. There has been a lot of talk recently about what open source means. To completely side-step that discussion, I have plane starred on github because I learned a lot looking at their code without ever having run it or ever using the product.

It's a drop in authentication system. You would need it to have users and logins for your app. Or you have to write and maintain your own. They say billing is coming so I guess it crosses the line into subscription management. I'm using auth.js with extra code for the same thing. That's been a revolution compared to wiring it all from scratch. Without subscription revenue (i.e. Just using this for accounts and auth) I couldn't justify the $75/mo needed for active directory SSO. But watching the demo video, I'd love to have a project with the financials to justify using Kinde