KRkrullie·Nov 8, 2017
That would be great, thanks! Here are the links to the projects I mentioned.
https://github.com/coreos/dex
https://github.com/ory/hydra
In Show HN: Keratin AuthN – Accounts and Auth Microservice in Godexidp
dex
Go2016–2024
dexidp / dex
dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
21Distinct people
26Mentions
0Explicit recommenders
11.3KGitHub stars
What to know before exploring
What it is
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- ory/hydra · linked in 3 of the same discussions
- bitly/oauth2_proxy · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 4:01:40 AM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year26 dated mentions
Observed mentions: 2016-02-05 15:43:05 UTC to 2024-11-14 15:46:34 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 6 | 0 | 6 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 7 | 1 | 6 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 3 | 1 | 2 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
7 sourcesClickable links:
[1] http://github.com/coreos/dex
[2] https://github.com/bitly/oauth2_proxy
In Google Cloud acquires BitiumJust want to leave a shoutout for CoreOS's dex[1] identity provider. If you need to hook up kubernetes or (any app that speaks oauth2) with SSO and get pluggable backends, I had it working with $EMPLOYER's LDAP infrastructure in 10 minutes.
It also works well with bit.ly's OSS oauth2_proxy[2].
[1] http://github.com/coreos/dex
[2] https://github.com/bitly/oauth2_proxy
In Google Cloud acquires BitiumUnfortunately Hydra does not (and will not) support the resource owner password credentials (ROPC) grant (https://github.com/ory/hydra/pull/297#issuecomment-294282671)
I'm no security expert, but to my understanding the ROPC grant makes sense for highly privileged applications, i.e. 1st party client applications (e.g. main app website, main native iOS client) as explained by http://oauthlib.readthedocs.io/en/latest/oauth2/grants/passw...
I've been looking around in this space for OAuth and auth out of the box alternatives. I've tried Kong's OAuth2 plugin (https://getkong.org/plugins/oauth2-authentication/) but after trying to integrate it felt like I had to write more code than necessary. Also had to configure a lot of APIs, and felt like it was clunky to manage them that way.
I have also tried to play with http://anvil.io, but the author
Read the rest
s are busy with another project (https://solid.mit.edu) so Anvil is taking a back seat. Even the Getting Started currently has known unfixed issues.
I am heavily investigating http://www.keycloak.org/, and so far I am really impressed. However though, to deploy you will need to delve into Wildfly/Java configurations. And of course, minimum 512MB to run any Java app on a node.
Dex is also advertised as a solution but it looks like the documentation could do with more information and improvements. https://github.com/coreos/dex Doesn't seem easy to just take and run.
Thanks to comments here, I might these looking at these next:
1. https://github.com/RichardKnop/go-oauth2-server
2. https://portier.github.io/
I think this is definitely the way to go for any modern login system that plans to support multiple external OAuth providers in addition to its own internal email/password identity.
Decoupling the account from the identity allows users to log in to the same account with any identity provider, and have access to all the private resources associated with any external identity within that same account. Think of a storage service that aggregates user data from Dropbox, Google Drive, and OneDrive, and allows you to log in with any one of the 3 OAuth providers to access data from all 3. With a naive model that couples identity to account, this kind of identity federation would be much more difficult to support and extend to additional identity providers.
For those looking to implement support for identity federation in a microservice environmen
Read the rest
t, I'd highly recommend taking a look at Dex from CoreOS: https://github.com/coreos/dex
It provides a consistent OpenID Connect based interface to multiple identity providers and identity management systems, for your backend to interact with (i.e. Dex talks to identity providers using whatever protocols they support, and your backend talks to Dex using OpenID Connect).
One way around this (from the developer's side) is to federate together different identities for a user using something like dex [1], and segregating your login and signup paths, so attempts to login will never create a separate account.
[1] https://github.com/coreos/dex
In Ask HN: Why not to use passwordless login?Show HN: Dex OIDC Provider for Kubernetes
3 points · Open discussion