FusionAuth/fusionauth-issues on Hacker News

…and opportunity for MCP lies. 0: https://fusionauth.io/docs/extend/examples/controlling-acces... 1: https://github.com/FusionAuth/fusionauth-issues/issues/3230 2: https://learn.microsoft.com/en-us/cli/azure/ad/app?view=azur... 3:…

comment by mooreds · 2026-06-19 · in Zero-Touch OAuth for MCP

…2: full list here: https://fusionauth.io/docs/extend/code/lambdas/ 3: https://github.com/FusionAuth/fusionauth-issues/issues/2309 4: https://fusionauth.io/docs/extend/code/lambdas/#limitations

comment by mooreds · 2025-11-21 · in Okta's NextJS-0auth troubles

…than standalone auth servers. 0: https://openid.net/specs/openid-connect-core-1_0.html#IDToke... 1: https://github.com/fusionAuth/fusionauth-issues/issues/773 2: https://www.reddit.com/r/KeyCloak/comments/1e2h5w7/is_paseto... 3:…

comment by mooreds · 2025-05-26 · in Ten years of JSON Web Token and preparing for the future

…k.org/securing-apps/oidc-layers#_token_re... 1: https://auth0.com/docs/secure/tokens/revoke-tokens 2: https://github.com/fusionAuth/fusionauth-issues/issues/201

comment by mooreds · 2025-05-26

…make our magic link implementation work with anti-phishing software, corp link checkers and more. https://github.com/FusionAuth/fusionauth-issues/issues/629 documents some of the struggle. I think that a link to a page where you enter a…

comment by mooreds · 2025-01-07 · in Magic/tragic email links: don't make them the only option

…code and confuse end users to no end. If you want more details, there is some discussion here: https://github.com/FusionAuth/fusionauth-issues/issues/2443 and on the related issues.

comment by mooreds · 2024-10-07 · in Ask HN: What type of Auth are you using on your side projects?

…ocs.oasis-open.org/security/saml/v2.0/saml-bindings... At FusionAuth, we have an open issue for this: https://github.com/FusionAuth/fusionauth-issues/issues/2467 which you can read for more details. SAML is full of these kinds of gotchas.…

comment by mooreds · 2024-09-27 · in SAML: A Technical Primer

Gotcha. We definitely don't have fine granularity around when MFA is required (open issue here: https://github.com/FusionAuth/fusionauth-issues/issues/2285 ). Other than that I'd suggest putting a page in front of our login pages with the…

comment by mooreds · 2024-02-22 · in Auth0 OSS alternative Ory Kratos now with passwordless and SMS support

…1: https://www.hashicorp.com/license-faq 2: https://www.elastic.co/pricing/faq/licensing 3: https://github.com/FusionAuth/fusionauth-issues/issues/ 4: https://www.crunchbase.com/organization/ory/company_overview... 5:…

comment by mooreds · 2024-02-11 · in Keycloak SSO with Docker Compose and Nginx

…low cost public feedback and tight loop between issue and code is worth some issue creep, IMO. 0: https://github.com/FusionAuth/fusionauth-issues/issues 1: https://github.com/FusionAuth/fusionauth-issues/issues?q=is%...

comment by mooreds · 2024-01-23 · in Backlog size is inversely proportional to how often we talk to customers

…even if not every vendor supports it. FusionAuth doesn't, though we have an open issue for it: https://github.com/FusionAuth/fusionauth-issues/issues/1471

comment by mooreds · 2023-11-19 · in Ask HN: Any comprehensive courses on Auth?

…using our APIs for this. Not available out of the box, but we do have it in the general roadmap ( https://github.com/fusionauth/fusionauth-issues/issues/91 is the tracking issue). > Rule based group assignment based on SAML attribute…

comment by mooreds · 2023-04-19 · in Show HN: Kinde – auth, feature flags and billing (Q3) in one integration

…one time tokens as it probes to prevent phishing attacks. More on how we built around that here: https://github.com/FusionAuth/fusionauth-issues/issues/629

comment by mooreds · 2022-12-30 · in Ask HN: Lightweight Authentication

…you might think. There's more details, including the workaround we ended up using, on the GH issue: https://github.com/FusionAuth/fusionauth-issues/issues/629 PS I agree they should absolutely have guidance around link lifetime as well as…

comment by mooreds · 2022-10-11 · in Tell HN: Stytch Login SaaS Unicorn has common auth vulnerabilities

Such a great idea! I filed a feature request on our GH issues list to implement this: https://github.com/FusionAuth/fusionauth-issues/issues/1888

comment by mooreds · 2022-09-20 · in Tell HN: Somebody implemented something I wrote a blog about

…log in. We ran into this at FusionAuth and had to do implement some workarounds, documented here: https://github.com/FusionAuth/fusionauth-issues/issues/629#i... Edit: https://news.ycombinator.com/item?id=32081192 mentions this and some…

comment by mooreds · 2022-07-13 · in Are Magic Links Outdated?

…always the "inside the CTO's head" priority list, but we strive to get that into GH issues.) https://github.com/fusionauth/fusionauth-issues/issues is our main external facing repo. We use it: * to track issues. Every code change should…

comment by mooreds · 2022-03-29 · in Ask HN: Anyone use GitHub Issues at their company?

…vendors and implementations, but other providers like Keycloak and IdentityServer do so as well. 0: https://github.com/FusionAuth/fusionauth-issues/issues/1496 1: https://github.com/FusionAuth/fusionauth-samlv2 2:…

comment by mooreds · 2021-11-24 · in Show HN: Open-Source Auth for NextJS / React

This is our major need right now: https://github.com/FusionAuth/fusionauth-issues/issues/1393 Basically, providing a static IP to some EC2 instance traffic so that folks can add an IP to their firewall.

comment by mooreds · 2021-10-18 · in AWS is playing chess, Cloudflare is playing Go

…has had users show a fair bit of interest in a modern experience with LDAP layered on top ( https://github.com/FusionAuth/fusionauth-issues/issues/954 ) and I talked to someone at a conference that had built a whole business out of virtual…

comment by mooreds · 2021-10-16 · in Kanidm: A simple, secure and fast identity management platform

I've looked at paseto (and even filed an issue in our repo about supporting them: https://github.com/FusionAuth/fusionauth-issues/issues/773 ) but the thing I keep running into is: * JWT can be secure if you are careful * there is wide…

comment by mooreds · 2021-07-30 · in Paserk: Platform Agnostic SERialized Keys

…it does a lot more than I need. Though the lack of a "public path" setting is the first roadblock: https://github.com/FusionAuth/fusionauth-issues/issues/88

comment by akvadrako · 2021-03-07 · in The reason Okta spent $6.5B on Auth0

…pricing, but Okta/Auth0 don't. I wrote out a list of 13 different use cases for FusionAuth ( https://github.com/fusionauth/fusionauth-issues/issues/1002 ) and I am still discovering new ways this coiuld be used. I'm sure that is the case…

comment by mooreds · 2021-03-05 · in The reason Okta spent $6.5B on Auth0

You’re right, it is not open source: https://github.com/FusionAuth/fusionauth-issues/issues/266#i...

comment by guu · 2020-01-10 · in Ask HN: How many of you are rolling your own auth?

…right now. The community for FusionAuth is growing quickly and it has an open issue tracker ( https://github.com/FusionAuth/fusionauth-issues ), good docs ( https://fusionauth.io/docs/v1/tech/ ), and many open source projects as well (…

comment by brokenwren · 2019-01-23 · in Nobody Cares About OAuth or OpenID Connect