k8_maze
Joined 7 years ago
Karma
38
Submissions
6
Member since
Jun 29
Recent submissions
Comment · 6 years ago
Comment · 6 years ago
If this is not a spin on the linked article, that would definitely be terrifying. A bit as if stack overflow and reddit had a baby.
If it is a spin, the identity system used is a popular open source system which you can find at https://github.com/ory/kratos. The react code is a reference implementation of the same people who wrote that thing, and the article is intended to help people get started with the open source stack. So if you were indeed applying for a job interview, and the task would be to write such an app - you would know where to look. Plus, this would probably reduce the amount of terrible login solutions we have today in the WWW ;)
Comment · 7 years ago
Whoops, now I feel dumb.
Comment · 7 years ago
Sorry to be that guy - the title tag has a typo: Mistaeks instead of Mistakes.
I promise that I will contribute more substantial feedback once I've read the piece :D
Comment · 7 years ago
No, they laid out several issues with Apple's OpenID Connect implementation with one of them being an actual security-related issue (missing nonce which can enhable replay and csrf attacks). You only have to pay if you certify and even then, 15k is not that much.
Hope this helps!