magiclinksdev VS t3-turbo-and-clerk

I authored magiclinksdev, which seems to fit a portion of your use case's authentication stack.

SaaS landing page

In this tutorial, we will implement single sign-on using Clerk, and use GitHub as the OAuth server that'll verify the user’s credentials. We are going to modify an existing application to add protected routes and use the pre-built UI components.

Clerk official example using Nextjs & expo: (no express, webhooks or credential auth) https://github.com/clerk/t3-turbo-and-clerk

I’m currently checking out https://clerk.dev, seems pretty decent so far. The pricing model isn’t ideal but apparently they are redoing it at this moment.

t3-turbo-and-clerk

If you want a complete out of the box easy setup for web and mobile, check this rep out https://github.com/clerkinc/t3-turbo-and-clerk

No I signed up with clerk.dev which made it a lot easier. tbh if it wasn't for them I would have had to hire a developer to help set that up because I had no idea about auth, user databases, and all that.

Some open-source identity solutions I learned could help; integrate with the Logto /Clerk, Ory... API to securely store access tokens that allow Chat GPT to access the user's Logto account; this is a start. But, like these, Security and privacy of service / Technical requirements for integration / User interface for authorization, there’s much to do. It's funny to rethink this topic.

https://clerk.dev meets all of your requirements except ABAC and OSS/self-host. Recommend checking it out if you want something that "just works"

I've def felt your pain before, and it's why I started https://clerk.dev - auth "should just work".