TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Zitadel: The best of Auth0 and Keycloak combined

100 点作者 mffap大约 3 年前

14 条评论

jzelinskie大约 3 年前
The usage of CockroachDB in newer security products is refreshing. I wonder if users could run one share a CRDB cluster between Zitadel and SpiceDB[0] to have a full, modern AuthN+AuthZ stack with few dependencies.<p>[0]: <a href="https:&#x2F;&#x2F;github.com&#x2F;authzed&#x2F;spicedb" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;authzed&#x2F;spicedb</a>
评论 #31413257 未加载
IceDane大约 3 年前
This seems very clean and handily beats keycloak there, at least.<p>I am building an application that will be deployed into a closed network, and it has some requirements regarding auth and authz that would be time-consuming(not to mention error prone) to implement. I also foresee there being a good chance of the customer wanting to integrate it with their existing stuff, so instead of having a custom user management system as part of the application, I ended up using keycloak.<p>So far, the experience has been .. okay. The beginning was kind of rough, and just recently there were some big changes, and some of the documentation is still out of date, and even more of the documentation is sort of .. meh. However, once I really started grokking both keycloak and the related authz concepts, it&#x27;s been pretty smooth sailing since. There are some rough edges, like the nodejs admin client being somewhat janky(possibly auto-generated), but otherwise I would definitely use keycloak in other projects.<p>Zitadel seems like a very attractive alternative, and the documentation is stellar compared to keycloak&#x27;s(at a glance at least, kudos for quickstart guides), but I&#x27;d still be sort of worried about the age and maturity of the project. Selling my customer on keycloak is relatively easy because it&#x27;s not super young and being managed and actively developed by the folks at redhat. Selling them on zitadel would probably be harder.<p>Either way, best of luck. When there&#x27;s a javascript client I might take this for a spin for a side project just to see how it compares to keycloak.
评论 #31409749 未加载
topspin大约 3 年前
Regarding B2B: You know what B2B frequently calls for? SCIM.<p>Not provided in Zitadel. Keycloak either. WSO2 IS has it. I hate WSO2 with a passion but it does SCIM.<p>A non-Java on-premises IS is certainly welcome. Haul in SCIM and I&#x27;ll take a swing at it.
评论 #31416095 未加载
评论 #31420985 未加载
评论 #31426307 未加载
评论 #31421813 未加载
评论 #31415806 未加载
inportb大约 3 年前
This is interesting, but... how does one deploy this in a container without k8s (using Docker)?<p>Keycloak is big and complicated, but at least it&#x27;s easy to hide all the complexity behind Docker. Other than configuring the database, one could treat it as an opaque blob.<p>Authentik is big and complicated and modular, so the complexity is apparent in the `docker-compose.yml`.
评论 #31409609 未加载
notlukesky大约 3 年前
What do you exactly mean by the best of Auth0 and Keycloak combined?
评论 #31409971 未加载
tucnak大约 3 年前
I had to set up a OIDC server so our website could act as the OIDC provider, and I got really surprised how hard that is to do if you really need the most basic setup. In fact it seems that everybody would just keep a Keycloak or whatever— in their cluster and would keep it up-to-date with whatever user schema they would have in their app. This felt like too much work for me (I didn&#x27;t want to maintain a whole extra service to just be able and provide a couple Oauth scopes from our API back-end.) so instead I went on and implemented the server directly in our app using <a href="https:&#x2F;&#x2F;github.com&#x2F;zitadel&#x2F;oidc" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;zitadel&#x2F;oidc</a>. In fact this was the only fully-functioning OIDC implementation in Go that I could just plug in and make it work. So big props up to the Zitadel guys, the only worry would be from my side that the server implementation could be more generic and could rely on a set of interfaces that the users would be able to implement easily, without having to import a bunch of code from &#x27;examples&#x2F;server&#x27; like we have to do at the moment?
评论 #31411465 未加载
评论 #31410373 未加载
yebyen大约 3 年前
When I checked this out 9 days ago there was a GitOps installation instructions page! I didn&#x27;t have a chance to follow it up right away, but now it doesn&#x27;t resolve anymore. What happened to GitOps support in Zitadel?<p><a href="https:&#x2F;&#x2F;docs.zitadel.com&#x2F;docs&#x2F;guides&#x2F;installation&#x2F;gitops" rel="nofollow">https:&#x2F;&#x2F;docs.zitadel.com&#x2F;docs&#x2F;guides&#x2F;installation&#x2F;gitops</a>
mooreds大约 3 年前
Interesting pricing model: <a href="https:&#x2F;&#x2F;zitadel.com&#x2F;pricing&#x2F;v2" rel="nofollow">https:&#x2F;&#x2F;zitadel.com&#x2F;pricing&#x2F;v2</a><p>Price per request isn&#x27;t as common of an identity pricing model as MAU is.<p>(Only applies if you host with them, of course. If you self-host, I believe it is free.)
评论 #31412079 未加载
andy_ppp大约 3 年前
This looks great if you need it to scale but I would like a self contained version that works in a couple of docker containers and doesn’t need a cockroach db cluster in addition to a normal database. Anyway know of anything!?
评论 #31411419 未加载
评论 #31410945 未加载
评论 #31412655 未加载
sneak大约 3 年前
&gt; <i>ZITADEL components send errors and usage data to CAOS Ltd., so that we are able to identify code improvement potential. If you don&#x27;t want to send this data or don&#x27;t have an internet connection, pass the global flag --disable-analytics when using zitadelctl. For disabling ingestion for already-running components, execute the takeoff command again with the --disable-analytics flag.</i><p>So, on by default spyware. How could anyone trust this in their infra when they are so shameless about exfiltrating data without consent?
评论 #31415870 未加载
ajacksified大约 3 年前
FYI your docs are broken - I can&#x27;t scroll down on anything (such as <a href="https:&#x2F;&#x2F;docs.zitadel.ch&#x2F;docs&#x2F;guides&#x2F;authentication&#x2F;login-users" rel="nofollow">https:&#x2F;&#x2F;docs.zitadel.ch&#x2F;docs&#x2F;guides&#x2F;authentication&#x2F;login-use...</a>)<p>Chrome 101.0.4951.64 &#x2F; MacOS 12.4<p>Very curious though as I&#x27;ve been doing a lot of OIDC work at Inrupt.
评论 #31411420 未加载
bovermyer大约 3 年前
This is interesting, I&#x27;ll have to check it out. I&#x27;m particularly curious about how it compares to Okta.
评论 #31409420 未加载
ofrzeta大约 3 年前
How does it compary to Ory or Gluu?
next_xibalba大约 3 年前
Yeesh, that name! What the heck were they thinking? &quot;Hey, what if we combined Zit and Citadel!&quot;<p>But seriously, now I want to know, what are the most unfortunate technology or startup names my fellow HN&#x27;ers have encountered? I&#x27;d bet a moderate sum there are some wild examples to be found in SV history.
评论 #31412537 未加载
评论 #31411456 未加载
评论 #31411364 未加载