Comment

Comment by hardwaresofton

Personally I think of Authelia and Keratin as really good projects in the don't-build-auth-into-your-apps-ever-again space. If auth isn't already built into your app gateway/mesh/proxy, then these services might be something worth dropping alongside.

A few more projects in this space:

- Keycloak (you won't get fired for picking this)[0]

- CloudFoundry's UAA[1]

- Gluu [2]

- ORY (Hydra + friends)[3]

- Keratin [4]

- OpenUnison [5]

- Dex[6]

- Netlify's GoTrue[7]

All of these solutions are a bit different but here are some of the axes:

- Whether or not they function as an OAuth provider

- Whether they're centered around application-user-login via mechanisms like email/password, application auth, or SSO

- Whether or not they serve as a proxy to another down-the-line OAuth provider (Dex, GoTrue)

- GUI availability

- F/OSS-ness (basically all of them have very permissive licenses)

[EDIT] More entries for this list in another comment @ https://news.ycombinator.com/item?id=26411457

[0]: https://www.keycloak.org/

[1]: https://github.com/cloudfoundry/uaa

[2]: https://gluu.org/docs/gluu-server/4.2/

[3]: https://github.com/ory/hydra#what-is-ory-hydra

[4]: https://keratin.github.io/authn-server/

[5]: https://github.com/tremolosecurity/openunison

[6]: https://github.com/dexidp/dex

[7]: https://github.com/netlify/gotrue

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton