Oh, Auth Doesn't Have to Suck?

This auth library and all the utilities that come with it are seriously impressive work. It's cool to see a very different, less abstract approach to going about auth.
-- sources
primeagen interview: • ThePrimeagen: VIM (btw...
lucia article: github.com/lucia-auth/lucia/d...
-- my links
saas: www.animate-code.com/
newletter: www.joshtriedcoding.com/
discord: / discord
github: github.com/joschan21

[@codernerd7076]

Auth without 3rd party! Need one full tutorial 😮

[@kazeemquadri01]

kzbin.info/www/bejne/Z363qnasiJVojJYsi=iuYngjZsbCy7zwH4 I found this very explanatory tutorial it might help

[@M1a2n3o43]

i second this.

[@irfanulislamjishan4416]

yaap

[@adnanamin3666]

✋

[@fcnealvillangca7943]

Yeah i hate 3rd party auth except firebase auth

[@user-of6ls2ng5l]

The war between Prisma and Drizzle is even in the authorization video

[@tuvshinbayartuvshinzul8489]

Like Goku vs One Punch Man

[@3b00d09]

lucia is my love, really glad to see you made a video on it! im a big fan of the library

[@jodp]

Just heard about this last week, glad to see you on top of this recent stuff!

[@RonnieDenzel]

This is what makes me feel that next auth gets wrong,its implementation is too high level,I'm at least happy that this library strikes a balance Thanks Josh💯

[@alasdairsmith0491]

I'm not sure we can discuss the concept of "abstraction" as either good or bad unless you have the context of the consumers of the abstraction. I appreciate your use of the phrase "right level of abstraction" as I think that starts to indicate that the appropriateness of the abstraction is very much a sliding scale.

[@branislavbrincko7237]

I hope this library gets much more attention because Nextauth’s decision to not support email password auth has been sooooo frustrating.

[@tommysaucey6095]

what about this fact ? you can actually use credentials with nextauth

[@oleh1]

what's the usecase of email password auth?

[@daycred]

It's so condescending. Even if you just want to enable in dev/staging or internal use, all of which are very valid use cases

[@over9000andback]

@@oleh1to not depend on a third party idp

[@CoryTheSimmons]

Auth companies hire (buy) these auth lib maintainers and then the auth libs go to 💩. Auth0 did it with Passport.js. Clerk is doing it with NextAuth. Basically, if you want a job in tech in 2024, just write a good OSS auth library and they are forced to hire you.

[@ThaumesD]

I really like this take! Good job explaining this!

[@erics2133]

Very interesting, and your comments really make me feel more comfortable with going with Lucia 3.0 vs AuthJS or rolling my own.

[@justindoane7482]

Been also using lucia v3, love it!

[@manuelsanchezweb]

We need a full tutorial on this!!! Great video, Josh!

[@Gustavo-bi4hv]

Yesterday I was studying NextAuth V5 and was a headache to implement a simple credentials sign-in feature. The documentation is horrible. It's just me or anyone else think that doc is horrible? I felt dumb.

[@darwinnarro2889]

It is. But is a really good tool if you know what are you doing

[@alphhs5260]

Yeah, the doc is pretty bad

[@marvinkr]

The worst doc in human history

[@boniedwin]

agree next auth docs is hell to read

[@Gustavo-bi4hv]

@@marvinkr Yeah. Cant remember any worse than that.

[@JukkaPekkaKeisala]

I have tried Kindle, NextAuth and Clerk but haven't felt home in any of them. I like abstractions that Lucia seems to deliver. I will give a spin. Thanks for video.

[@mettle_x]

There's more to say about "Abstraction". Abstractions that don't give you granular controls can also be good if the things they're abstracting are **not intended to work with** for the most cases. Thus it sets up a recommended design pattern. Customization along with sane defaults doesn't work all the time. If you think about it, React is such an example of the abstraction. Monads can be regarded in the same category.

Amazing! I will give it a try

[@milos018]

"In the beginning you want results, in the end you want control" by someone on the internet. Works here too :)

[@KSalvatore]

Good library need to try it to learn. I used next-auth and don't understand exactly how it works. And I kinda getting why non abstracts good. I recently learning prisma It is very easy. Can you do a comparison or explain how drizzle works from prisma users point of view. Thanks😊

[@MyGeorge1964]

Dude, heard of Aceternity UI - it amazing

[@user-sn5ee1oi2v]

Josh, love your videos. I have a doubt. Is there still caching issue in NEXT JS 14 ? Does server actions resolve all these caching issues ?

[@codinginflow]

I've implemented Lucia auth today and I much prefer it over Next-auth. It doesn't force you into ugly design patterns (both backend & UI).

[@tylerdrabek1592]

Please for the love of God make a full deep dive turorial

[@manalavi]

This is great. Do they have the example / resources on how to use with fastify server. Need this to build it in my application.

[@BeyondLegendary]

Impressive, very nice. let's see Paul Allen's auth.

[@itsfarseen]

Bro you make so much sense ❤ youre the messiah we needed after being fed the enterprise bullshit for 20 years since the invention of Java.

[@mr.random8447]

The benefit of higher level of abstractions in terms of UI library is if you need to enforce strong design constraints and consistency

[@ChichaGad]

Great video Josh! I have to admit that Auth.js is cancer, especially their docs are a huge chaotic contradictory mess Regardless of whether v4 or their latest v5 I was waiting for Lucia 3 to come out because this version doesn't force the usage of an adapter, and I'm glad they brought this change For now I can safely say I'm happy with switching to Lucia, especially because their abstraction still gives me full control of how, why, when, and where I want something

[@raymondmichael4987]

I need full example with this, using different auth providers and linking user if they happen to have more than one provider 😊

[@yousofscodingadventures]

Banger video

[@asadsalehumar1011]

exactly, the right abstraction!

[@noelpena4567]

Am I wrong in thinking that abstraction is good for features like Auth? I understand that it depends on the project/scenario but wondering if I am missing something. I use third-party Auth providers that provide abstraction because I don't necessarily want to know or handle everything under the hood. Thoughts?

[@aldierygonzalez7249]

I agree, but there are so many times where you need to do things where the best solution would be to modify the authentication flow. When these situations happen, I think it gets to a point where abstractions feel like a barrier to your solution rather than a helper. Things like syncing a database from an external Api on login gets really hard when you don't have access to your own login function.

[@antares-the-one]

try implementing auth with normal error handling when errors are on the credentials page, not on complete separate one. What kind of ux is that?

[@JD-qo9wk]

Possible to use Lucia with React Front-End + Python FastAPI Backend?

[@BhideSvelte]

He is 19yrs old

[@shakapaker]

How to react?

[@s.adnansami5106]

​@@shakapaker Badum tss!

[@sureshmutluru4532]

Full tutorial please

[@AlanDanielx]

Lets give some love to Lucia

[@raymondmichael4987]

There goes my auth stack; you sold it really well

[@BhideSvelte]

He is god i just love his work a lottt

[@kathanmehtaa]

what auth do u use josh? Clerk, Lucia, Nextauth ?

[@olivermarkey4441]

Dude I saw this on Twitter and I’m so annoyed bc I just implemented nextAuth but if this is good I’ll switch- I saw a boilerplate that includes stripe pre built which is amazing.

[@bullettime2808]

I would love to see a tutorial on Authentication that works in both Next js and public clients like SPAs and mobile apps like React Native kr Flutter without using a paid service like Clerk

[@salihyil2]

How do you learn so much stuff, and when do you learn it?

[@theether5993]

I have seen this guy, before v1, when it used to be for sveltekit.

[@lasindunuwanga5292]

That introduction part is so true and sad .NET has such an annoying part. I am so mad at it. It has abstracted out everything so it cannot be modified for our special use cases. Instead build it from the ground 0

[@namestarlit]

less abstraction, huh... I like it

[@a1x5h04]

Every Josh Thumbnail: 😏

[@xya6648]

The title got me cracking up! OhAuth -> OAuth lmao

[@Chris...S]

Wondered how many actually got that

[@neociber24]

Now we need an abstraction over Lucia to support all: Password, Social, Passwordless, etc...

[@Michael-lg6nv]

Is it also possible to use Lucia Auth without Typescript?

[@Gustavo-bi4hv]

Please, do a full tutorial with credentials and OAuth login. It would be amazing!

[@iangithinji1452]

Is Lucia better than Clerk? Someone answer

[@dhaw]

single guys rocks 🤣

[@maxgarcia4547]

Vue Composition API flashbacks

[@cb73]

I'm sure the folks at Radix are stoked you said Shadcn is just a collection of primitives. :-D

[@anonanon7368]

full tutorial pls

[@supermamoru]

Authentication is always a pain when I have to recode it every single time 😂

[@irfanulislamjishan4416]

You should make one auth tutorial without any third party library.

[@mirozxl]

one thing issue with lucia and others like auth js is lack of proper resources and documentation. Would love a tutorial on lucia

[@riolly]

Cool

[@dan_____]

NextAuth was like "we cba to add credentials authentication" and they called it a feature 🤣

[@prodfragment]

Interesting. NextJS was smoking crack while creating NextAuth. From a quick glimpse, I can tell it's better

[@filipniklas]

Supertokens

[@anlukinha8764]

It is basically a Shadcn for Auth.

[@anlukinha8764]

ps.: I wrote this comment before shadcn appeared on the video lol

[@dnbull]

Lucia made by a teenager, legendary!

[@AbhiShake-pl3cf]

Better than nextauth? I dont really like clerk

[@christopherkapic]

It's a bit more work than NextAuth but overall I think it's better. NextAuth is easy because it's heavily abstracted, which can be a bad thing. Also NextAuth is in kind of a weird place wrt development lifecycle and documentation.

[@itsfarseen]

0:38 Why is he single 😢

[@jitx2797]

I just love lucia. It works. It also supports Astro.

[@ShekarGoud8055]

“I have reading comprehension and the attention span of a second grader” Relate 100

[@alastairtheduke]

I think this is generally a good idea. However, in the OAuth case, you really have to know how the OAuth flow works...and to be honest, I think this is actually the biggest hurdle to implementing OAuth.

[@nazarshvets7501]

Yea, and on the other side is framework-dependent poorly documented opinionated library(micro-framework). Learn flow once, implement everywhere, don't be a frameworker

[@paw565]

I just use django ❤

[@jovrx]

Seems like no one got the joke in the title? 😄

[@xav_624]

Great content. Lucia is awesome

[@samislam2746]

We call this a headless library

[@mubin-ansari]

Wake up babe, new auth library just dropped

[@greatnile]

am I too old or this is the modern rewrite of passportjs?😂

[@aaronwolbach9880]

You shouldn't implement authentication. You should buy it.

[@iAbhijeetShukla]

next-auth is crap next-auth is crap next-auth is crap next-auth is crap next-auth is crap next-auth is crap

[@xbozo.]

imo nextauth is shit to deal with, they turn things much more complicated then they should be

[@AkashLayal]

Second. ❤

[@codewithmastery]

first

[@user-ru3jc8tf1x]

This tool sucks, i prefer auth0 or eartho