All Questions



Is anyone using (or has used in the past) auth0 for authentication for their project?

author Benedikt

Reply
29 Answers

no sorry, never used it

writen by Luca Restagno (ikoichi on Twitter)

I’ve used Firebase, AWS Cognito, and NextAuth in the past.

writen by Luca Restagno (ikoichi on Twitter)

i used it in an enterprise setting maybe 4 years ago iirc it hadnt been bought by okta yet

writen by Matt Gale

Yeah I’m a bit reluctant since there was an octa related breach lately, if I remember correctly. I thought about using it for http://maildump.io|maildump.io. Then again, I always wanted to implement my own authentication server

writen by Benedikt

oh nice! i feel like mail archival has been on my radar for a couple months now- ive seen various people on twitter mentioning it

are you thinking SSO?

writen by Matt Gale

Not necessarily from the beginning but midterm yes

writen by Benedikt

So Matt Gale what’s your expectation about an email archiving tool? And would you use (AI based) content extraction like summaries, links, etc. reachable via API?

writen by Benedikt

i not really sure why people are doing archival outside of distrust of 3rd party providers, or maybe you use a desktop client that connects to a POP3 server

i likely wouldnt use that service- i dont get much email/try to spend as little time in my inbox as possible

writen by Matt Gale

I see. So you mean it would be too unsafe to use as a SaaS?

writen by Benedikt

im trying to find it, but i thought it was <https://twitter.com/garybernhardt|gary bernhardt> who was talking about archival solutions and nothing worked for him

writen by Matt Gale

no, i mean i personally dont need a mail archival tool if google banned me and i lost all my mail, that might actually be a good thing

writen by Matt Gale

i am interpretting mail archival as: your tool downloads all my mail messages so i can back them up for storage outside of google

writen by Matt Gale

Exactly

writen by Benedikt

k cool, just wanted to be sure

writen by Matt Gale

Well, 3 main features actually: 1. it’s a backup as well. 2. You can delete emails regularly and still have it archived somewhere 3rd party if you’d still need it (i.e. for legal reasons). 3. You can retrieve structured data from mails you might need for whatever reason

writen by Benedikt

ah sure, makes sense

writen by Matt Gale

theres a selling point right away then: a gmail search at actually fucking works

writen by Matt Gale

I guess I have to work on that a bit but yes

writen by Benedikt

Benedikt have you though of using vectorDBs and similarity search to extract the right emails?

writen by Luca Restagno (ikoichi on Twitter)

that’s something I’m using for Userdesk and AI Chatbot data extraction and it works pretty well.

writen by Luca Restagno (ikoichi on Twitter)

plus, I’m not sure if an individual might be interested in backing up the emails, I personally use Google and that’s fine. have you tried asking the same question to businesses? it might be much more critical for them.

writen by Luca Restagno (ikoichi on Twitter)

I haven’t Luca Restagno (ikoichi on Twitter) but sounds like a good idea

writen by Benedikt

Yeah small to medium businesses definitely are the target. It’s not important for most individuals

writen by Benedikt

I have a customer who lost proof because they accidentally deleted an email in gmail (Not gsuite or how it’s called right now)

writen by Benedikt

I’m using auth0 at http://newarc.ai|newarc.ai

Next time I’ll roll self-hosted auth using the most popular auth framework for whatever stack I’m using. (https://next-auth.js.org/ for NextJS)

Not worth it if all you need is email+password and Google auth.

writen by Kirill Rogovoy

Cool thx

writen by Benedikt

That said, it’s not awful either. It works and I pay $0. Plus, I didn’t have to design the login/sign-up/restore password/etc forms except for brand colors

It’s just that it brings too much stack complexity for what it gives you especially when the open-source auth libraries/frameworks are low-effort too.

writen by Kirill Rogovoy

be aware that if you want to develop mobile apps ever, NextAuth is not suitable.

writen by Luca Restagno (ikoichi on Twitter)

Thx Kirill Rogovoy and Luca Restagno (ikoichi on Twitter). I was also thinking about using sth. like https://www.keycloak.org/|https://www.keycloak.org/. Or writing sth in Rust since I had a few concepts in the past I wanted to try :smile:

writen by Benedikt

Do you want to ask a question?


Related Questions