stack VS logto

Hi HN! We're building Stack Auth (https://stack-auth.com/), an open-source managed authentication and authorization platform. Basically, we build your login and signup pages, and everything that comes with that.

You can find our customer pitch elsewhere, so instead I'll tell you more about us and the company. We are developers building for other developers, so you can think of everyone here as a devX engineer. We launched with a Show HN in April, and have been growing exponentially since.

Think of us as a fast-moving open-source infrastructure business. We spend a lot of time thinking about how we can maintain the agility of a startup while being as reliable as incumbents. Sometimes, this means new ideas; for example, we heavily rely on AI and snapshots for our E2E tests, and have API migration tooling that blows everyone else out of the water. If you have ideas like these, we want you.

We've sworn to keep a no-bullshit culture. We're all pulling on the same string; we don't keep secrets from each other and always assume good faith. We want to build the open-source cloud infrastructure of the future; we'd rather die trying than sell out for a quick buck.

We are (very) well-funded by investors such as YC, Paul Graham, Guillermo Rauch, Theo Browne, and Khosla Ventures. Our number one priority is to build an outstanding product that developers *really* love — everything else comes second.

For now, we are exclusively hiring onsite in San Francisco; sadly, we don't currently have any remote positions. Optionally, you can move with us into our hacker house (both temporarily or permanent), but you can live in your own home too.

If that sounds like a great fit, email me mentioning that you're from HN and tell me why we caught your eye: konsti (at) stack-auth.com

Thanks all!

I'm biased but Stack Auth [0] is fully open-source, self-hostable, and we offer reasonably priced managed hosting, if that floats your boat.

[0] https://github.com/stack-auth/stack

Stack Auth maintainer here. Kinda disappointed by the lack of open-source solutions in this thread — if anyone's looking for managed auth like WorkOS/Clerk/Auth0, but wants it to be 100% open-source, you should give us a go. https://github.com/stack-auth/stack

Before we dive in, I want to quickly introduce Stack Auth, the open-source authentication library we’re building. It’s designed to be super easy to set up and offers a beautiful set of UI components right out of the box! Whether you’re building a SaaS product or your next side project, Stack Auth simplifies authentication without compromising on flexibility.

Not sure about Azure ecosystem but huge fan of https://clerk.com/.

Trying out https://stack-auth.com/ which just launched on HN, mostly out of OSS solidarity

We created a SECURITY.md file on our repo, it's in the .github folder: https://github.com/stack-auth/stack/blob/dev/.github/SECURIT...

If it helps you, we delegate the most vulnerable parts of the application, such as OAuth, to lower-level frameworks — similar to the unmanaged auth libraries people use today. We are essentially a thick wrapper around those, to create a full-stack platform from primitives.

The point I disagree with is that building it yourself is better than delegating it to a third-party — at best, you can secure your auth against vulnerabilities you're aware of. Unfortunately, this fallacy keeps coming up, but generally it's the case that homebrew auth is not more secure than open-source libraries, nor is proprietary code.

If you choose the latter, there's absolutely no reliance on us; if you think we're doing a bad job at any point in time, you can export all your data and start self-hosting instead.

Also, we're more than just authentication — we have authorization built-in (permissions, teams, ...), and a frontend to manage your users (with impersonation, filtering, ...). You can use any language to access these features through our REST API [1].

We also have a bunch of components for sign in, password reset, organizations. For now, we only support Next.js frontends and backends in any language with our REST API [1], though our docs also list the client endpoints, and some people have been building frontends for other languages.

For more info, check out our GitHub repo. We're really early, but have a handful of production users already. Any feedback is highly appreciated!

Thanks all!

[0] https://stack-auth.com

[1] https://docs.stack-auth.com/rest-api/auth

[2] https://github.com/stack-auth/stack

Have you seen this? https://github.com/logto-io/logto

How does it compare?

feature request: add suspend user event for webhook #4297

We'd like also invite you to take a look at our new website and explore the features of Logto Cloud.

Want to give it a try? Go to Logto Cloud and pick a connector.

Thanks for the great feedback :)! We're pleased to confirm that we do offer support for our Hobby plan. However, if you're looking for premium support with a response time of 48 hours, that's part of our Pro Plan. Additionally, Logto has a vibrant community that is always ready to assist with any issues you may encounter. When it comes to pricing, ours is based on Monthly Active Users (MAU) and user engagement. For an app with around 10k MAUs, you can expect an approximate cost of $100 per month, based on our prediction and industry benchmarks. We make a point of being transparent about our pricing on our website, so our customers can make informed decisions with confidence. In terms of cost, we believe our prices are competitive within the industry. As a SaaS company, we specialize in providing comprehensive identity management services. Our solutions adhere to open standards and cover essential aspects like user sign-in/sign-up and user management features such as role-based access control. If our Freemium or Hobby plans don't meet your needs, we also offer a fully open-source version. This option is highly regarded within the open-source community and might be a suitable choice for you. https://github.com/logto-io/logto

Security is a complex topic, and it is impossible to cover everything in a single article. We hope that this article has helped you build a stronger sense of security for yourself or your team. If you are building a new app, you may also want to check out Logto, a platform that helps you develop, manage, and secure your product's user identities with minimal effort.

Learn more details in the blog: 👉 Tackle social login experience: Unlocking the power of convenience. From the perspective of Increase Conversion, Get Quality Data, and Retain Users, I explored the benefits of Social Login and offer some tips with comparative case studies. Additionally, you can experience the seamless sign-in experience configuration firsthand within Logto Cloud Console. Value your insights if you have any better suggestions.