Hydra on HackerShow

Security and privacy

authentication server

SHOW HN2019

Open-Source OAuth2 Server

Shown by vwpolo3 on Jul 1, 2019. Click the card to turn it over.

190points

51comments

#205of 2,195 in 2019

Top 10%of 2019 by points

How HN took it

CuriousMostly questions and neutral comments

3 positive, 15 neutral or asking, 0 mixed, 2 critical, out of 20 comments about the project. Thread score +0.10.

Design: 2 for, 0 againstIdea: 0 for, 1 against

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

Built from the start to be containerized
From 2 comments
- In my research, Hydra is the only OSS OIDC server implementation that is built from the start in a modern, containerized manner.
  Ken_Adler on HN
- The difference is probably between "can be made to run in a container" (which is true for almost every app) and "designed from day 1 to be containerized" - which is obviously not…
  unscaled on HN
Lightweight compared to Keycloak
From 1 comment
- It leaves the implementation of the login (enter /password, ...) and consent (may application X have access to your pictures?) flows up to the developers using HTTP Redirection…
  vwpolo3 on HN

Hydra leaves login and consent to the developer, so more work is needed
From 2 comments
- The difference is probably between "can be made to run in a container" (which is true for almost every app) and "designed from day 1 to be containerized" - which is obviously not…
  unscaled on HN
- If we have to implement all those things, is there really much of a remaining lift in implementing OIDC, apart from bringing in a library into a web app?
  atonse on HN
OAuth2 and OIDC are complex and overkill for small projects
From 1 comment
- Yes, implementing both OAuth2 as well as OIDC according to spec is a significant development effort and countless teams and companies fail at pushing through, shipping incomplete…
  vwpolo3 on HN

Load test reports and scale data
From 1 comment
- Are there any load test reports? How well does it scale?
  argd678 on HN
Clearer high-level explanation of what it does
From 2 comments
- Site doesn't seem to give a simple high level explanation. How does this compare to a service like auth0? Seems like a subset of a cognito/auth0/okta?
  zild3d on HN
- I'm not too familiar with this space, so please excuse my question. What is OAuth2 server is? I was under the impression that for a given service/API typically OAuth2 is…
  quelltext on HN

How does it compare to Keycloak and Dex
From 1 comment
- How does Hydra compare to other OIDC server implementations like Dex and Keycloak?
  praseodym on HN
How it compares to Auth0 or Cognito
From 1 comment
- Site doesn't seem to give a simple high level explanation. How does this compare to a service like auth0? Seems like a subset of a cognito/auth0/okta?
  zild3d on HN
Whether it handles IdP mix-up mitigation
From 1 comment
- How do you deal with IdP/AS mix-up? The BCP recommends either sending back client_id and iss (but that draft[1] is long expired, and nobody seems to support that implementation),…
  unscaled on HN