Show HN: Comprehensive authentication library for TypeScript - https://news.ycombinator.com/item?id=41678652 - Sept 2024 (44 comments)
I'm planning to migrate our authentication and session management from auth0 to this to save costs and make things simpler.
Not sure this will save you time and money, but it is very comprehensive.
I'm not a security expert, so please advise any pitfalls that the new libraries address which cannot be done with firebase
It took me a while to grok that in SSR frameworks, you shouldn't treat the SSR backend as a data backend. The best mental model is that the "SPA" just now has a client-server boundary in the middle of it. You should have a normal data API servicing the SSR backend.
With this approach, this does mean that client-server auth can now either live in the SSR backend or as normal on the data api. Arguably doing it on the SSR backend makes the most sense since that is now your server boundary. In this context the resurgence of auth in the SSR space make sense.
Instead of becoming this mishmash of backend and frontend, there's a clear delineation between the two. They share common functionality via functions (like model and views), which is much easier to do when they're pure.
You basically get the advantages of those magic frameworks without all the magic.
[0]: https://blog.nestful.app/p/gleams-lustre-is-frontend-develop...
(I've never worked with Nuxt or Next though, so I can't directly compare them.)
Making a general purpose API as if it were its own product seems to lead to better, more sustainable outcomes.
Since http protocols and browsers change and especially google never ceases to push new optimizations, it is extremely difficult to keep up and do the right thing.
It's the real deal.