Original Summary

Ok - so "doesn't suck" is a bit of a loaded phrase. Apologies. But what I mean by that is: Doesn't gate developing support for security features (MFA, Passkeys, etc) behind paid plans. I don't mind them being on paid plans in prod. My complaint here is when you can't even build support for them before paying. Has standards-compliant OIDC support Has standards-compliant JWT / JWK support Has API support for everything Preferably a single unified API instead of multiple different APIs for different clients, but that really seems to be asking too much! Doesn't need massive amounts of configuration just to get started And where configuration is needed, it's obvious what and how to do that. Now, maybe I'm picky, but this list feels like it's scraping the barrel of minimum viable product. Especially in 2026. And yet, I've looked at a lot of hosted IdP providers. And none of them meet all of these. Some come close, but close just doesn't cut it for me. Now, I know that I've moaned about this before more than once. And I've talked about just giving up and building my own offering more than once. And I know that's a bad idea. But today I've just discovered that the latest one I've been using: Requires a non-standard parameter on all OIDC calls - the /authorize redirect, the /token call to get an access token and the /token call to refresh the access token - otherwise you get an opaque access token that you can't resolve locally - which means I've had to do some extra configuration of react-oidc-context in order to use it. Returns a JWK that is missing the alg parameter, meaning that Biscuit refuses to support it. Supports a flow for validating an email address before you save it to the user profile, but doesn't seem to have any way to customise the email template used for this. So it's more and more feeling like it's less of a bad idea, because it more and more feels that if I can build something that meets these bare minimum requirements then I'm already going to be better than most of the competition... /rant :)   submitted by   /u/sazzer [link]   [comments]

  • 情报分类：商业与市场研究
  • 分类依据：内容涉及商业、投资或市场动态
  • 信息来源：Reddit · SaaS
  • 发布时间：2026/10/18 03:34:46