
I Just Wanted a Login Form: The "Swamp" of Complexity in the Modern Auth Ecosystem
Introduction Although we group them under "Authentication and Authorization," these fields cover various domains and technologies and are extremely complex. I am personally involved in developing products related to authentication and authorization, and I get a headache every time I have to define requirements. For a personal web app development project, a "simple login form with just an ID and password" should be sufficient. But what is the reality? Before I knew it, I was scouring OAuth 2.0 RFCs, drawing OIDC flow diagrams, fighting with SAML XML, and debugging OPA (Open Policy Agent) Rego language... I developed a joke site called "I just wanted a login form." to express the "grotesquely complex swamp" that modern Authentication and Authorization systems harbor, incorporating satire and humor. The "Chaos" This site is built as a React SPA and visualizes the "excessive authentication requirements" that modern developers face. Endless Social Logins: A wall of buttons covering everythi
Continue reading on Dev.to
Opens in a new tab


