Go Auth Lib

I would like a magic link to email + long time bearer cookie. Extremely simple. Email is used for recovery anyway. Is there any deal-breaking downside to that? Is it worth using eg Google to prevent abuse of e.g. excessive free tier account creation or spammers?<p>Use case: SaaS for non-techies on desktop, international audience with payments for premium service.

My biggest struggle with projects right now is how to handle auth. Sure hashing a password and pairing it with a n email is easy in theory, but there are bad actors with zero days for any db&#x2F;backend I’d want to use and they can practice all they want on my app as it sits on a server exposed to the world 24&#x2F;7.<p>I’m going with trying out firebase auth for the express apps I’m building now, but this makes me even more inclined to check out go when I’m finished with this latest project.

It looks like this uses JWT, which was disgust here a few days ago: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=33019960" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=33019960</a>

It looks fairly well thought out. I can imagine myself adopting it for internal sites (e.g., auth against corp okta)<p>Does anyone have any experience with it? It&#x27;s been a while since I&#x27;ve really dove into authentication best practices, so I don&#x27;t want to comment on implementation quality. The interface looks nice enough to use.

Apart from this and <a href="https:&#x2F;&#x2F;github.com&#x2F;python-social-auth" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;python-social-auth</a> , which languages have such meta-libraries providing uniform interface to authentication through a lot of social platforms?

I stopped reading when I saw &quot;JWT&quot;.

Shameless plug, but I built a thing[0] that lets you set up auth in 2(!) steps after you&#x27;ve signed up.<p>It&#x27;s not free, but it&#x27;s VERY easy to use&#x2F;complete setup, supports regular auth (username&#x2F;pw, email), and has support for a <i>lot</i> of providers (especially twitter with it&#x27;s dreaded OAuth 1.0 setup), and it&#x27;s probably the easiest to get started with.<p>Try it out for free, send me an email (see profile) and I&#x27;ll get you set up or discounted.<p>[0]: <a href="https:&#x2F;&#x2F;waaard.com&#x2F;for&#x2F;login" rel="nofollow">https:&#x2F;&#x2F;waaard.com&#x2F;for&#x2F;login</a>

This title is interesting, because &quot;Auth&quot; (Authoritarian) and &quot;Lib&quot; (Liberal&#x2F;Libertarian) are both used to denote opposite ends of the vertical axis of the &quot;political compass.&quot;