Open Source Authentication and Authorization https://ift.tt/DpR3st5

Open Source Authentication and Authorization I’m Rishabh and the co-founder and CTO at https://supertokens.com (YC S20). We offer open-source user authentication and we just released our user roles product for companies implementing authorization. Our users are web developers, and a prominent and adjacent pain point for our users is authorization. Developers typically implement two independent solutions for authentication and authorization. Offering AuthN and AuthZ in a single solution is something we’ve been thinking about for the last few years. Quick primer, authentication is knowing who the user is, and authorization is knowing what the user has access to. A physical analogy: A person enters a building. Authentication means reading their ID card and knowing that the person’s name is John. Authorization means knowing which floors, offices, and files John has access to. With increasing privacy and data complexity, companies like Netflix[1], Slack[2], and Airbnb[3] have built out their own complex authorization systems. To build our user roles product, we started with a first principles approach of covering authorization use cases using scripting languages such as XACML and OPA. But looking at existing solutions built by talented teams like Oso[4], Aserto[5], Cerbos[6], Strya[7], we realized that while these were powerful solutions, they were often overkill for most early to mid-stage companies (especially on the B2C side). We went back to the drawing board, reached out to our users and after dozens of conversations, we realized that most authorization needs require the ability to 1. Assign and manage roles and permissions 2. Store roles in the DB and session tokens to make it readable on the frontend and 3. Protect APIs and websites based on these roles and permissions. And so, we built user roles – a simple RBAC authorization service that focuses on the balance between simplicity and utility. It doesn’t cover many complex cases and we’re not looking to displace any of the authorization incumbents. But you can add AuthN and AuthZ using a single solution, quickly. In the near future, we’ll be launching an admin GUI where you can manage your users and their roles with a few clicks. We’d love for you to try it out and hear what additional functionality you’d like to see. What are your favorite authentication providers and what do they get right? - [1]: https://ift.tt/XFsRg96 - [2]: https://ift.tt/wLXQaAz - [3]: https://ift.tt/WjTC9eX - [4]: https://www.osohq.com/ - [5]: https://www.aserto.com/ - [6]: https://cerbos.dev/ - [7]: https://www.styra.com/ November 3, 2022 at 07:15PM

Show HN: Create maintainable Tailwind components in Ruby https://ift.tt/rI86V03

Show HN: Create maintainable Tailwind components in Ruby https://ift.tt/eVyEGU6 November 3, 2022 at 09:59PM

Show HN: I wrote an eBook on Linux CLI tools and Shell Scripting https://ift.tt/LjsMhub

Show HN: I wrote an eBook on Linux CLI tools and Shell Scripting Hello! This ebook aims to teach Linux command line tools and Shell Scripting for beginner to intermediate level users. The main focus is towards managing your files and performing text processing tasks. Includes plenty of examples, exercises (200+) and solutions. To celebrate my latest ebook release, you can download PDF/EPUB versions of Computing from the Command Line for FREE till 08-Nov-2022: https://ift.tt/WAyJauO (the web version linked as the post url is always free) All books bundle (all my 13 programming ebooks) is $10 (normal price $28) - https://ift.tt/sbDESke... Visit https://ift.tt/zN5uWYc for markdown source, example files, exercise solutions, sample chapters and other details related to the book. I would highly appreciate if you'd let me know how you felt about this book. It could be anything from a simple thank you, Gumroad rating, pointing out a typo, mistakes in code snippets, which aspects of the book worked for you (or didn't!) and so on. Reader feedback is essential and especially so for self-published authors. Happy learning :) https://ift.tt/PCAFeUs November 3, 2022 at 04:41PM

Show HN: Nudges.fyi – simple, unmissable reminders via phone/text/email https://ift.tt/X7rVcum

Show HN: Nudges.fyi – simple, unmissable reminders via phone/text/email I built this app primarily for my wife, who has tried many mainstream todo-list apps (OmniFocus, Things, and Todoist come to mind) over the years with little success. She isn't particularly interested in setting up a productivity system and the administrivia that goes with it. Even having to remember to look at an app once a day was far from ideal for her. This app is an attempt at a solution for anyone that fits this description, with a focus on alerting over organization. Here's how it works: you create a nudge that's set to trigger at a given date and time, and the app phones you, texts you, or emails you (or all three) at the right moment. Nudges can trigger on a schedule, so something like "call me about monthly bills for the next month on the last day of every month" is quite easy to set up. It also works well (sample size 1, admittedly) as a supplement to a more robust GTD system. I use Things for almost everything, but my most important reminders are set up as nudges. I've worked on this on and off for the last month or so and I think it's ready for a Show HN. There's likely some rough edges in there so I wouldn't use it for anything _critical_ just yet (let me know if you see anything that looks buggy!). I cut a lot of scope in order to release an initial version quickly; here's a list of things I'm considering adding to the app in the near future: - Implement something analogous to Pagerduty: create nudges that repeatedly nag you (with something like an escalation policy) until you acknowledge them - More notification channels: get nudges on Telegram, WhatsApp, Slack, etc. - Families (or teams, possibly) share a namespace and can send nudges to each other - Nudges that collect a response: possibly for polls, a daily diary entry, or habit tracker - Incoming and outgoing webhooks - Snooze a nudge so it re-triggers in X minutes I work on distributed systems at my day job and haven't done frontend and CRUD things in a long while now, so building this out was a nice change of pace. If anyone's curious, the app is built with: Next.js (in static HTML mode) and Tailwind for the frontend, Go for the API server and background nudge loop, and SQLite (+Litestream) for persistence. In any case, I'm looking for feedback from the HN community here: is this something you would use? TL;DR: schedule reminders for yourself via phone call, text message, and/or email (PS: the free plan doesn't allow call/SMS nudges because I'm a bit wary of spam, but if you'd like to give this a shot and can't [or don't want to] subscribe to a paid plan at this point, send me an email at tim@nudges.fyi for a 1-month code) https://nudges.fyi November 2, 2022 at 10:30PM

Show HN: Inhuman Time – change “3 days ago” to actual time on GitHub https://ift.tt/NJekO8M

Show HN: Inhuman Time – change “3 days ago” to actual time on GitHub https://ift.tt/h4MqVOG November 3, 2022 at 09:04AM

Over Half Next Generation Muni Shelter Displays Installed with More Upgrades Coming

Over Half Next Generation Muni Shelter Displays Installed with More Upgrades Coming
By Kharima Mohamed

New Muni service information displays are going into Muni shelters throughout San Francisco with updated features as part of SFMTA’s Next Generation Customer Information System upgrades.

As part of our Next Generation Customer Information System (CIS) project, we are installing over 800 new, larger Liquid Crystal Displays (LCDs) at Muni shelters and stations, replacing existing NextBus signs and expanding real-time information coverage. So far, we are over halfway to completion, with over 435 new displays installed in shelters. New screens show real-time multilingual information including graphics, maps and destinations.

New LCD displays (left) are replacing the previous Muni information displays (right).

Beginning this fall, Muni predictions on our new and improved Next Generation screens will include:

• Crowding. On vehicles equipped with automatic passenger counters, displays will show how crowded they are.
• Short-term route changes. We’ll be able to show planned short-term route changes, such as routing around special events. 

We are aiming to replace the remaining displays by the end of 2023. Additionally, we are working on new display locations with an emphasis on underserved neighborhoods, such as those identified by the Bayview Community Based Transportation Plan.

Learn more about the remaining display installation work, what’s next for our Next Generation upgrades and the many new features rolling out soon.

Get Real-Time Stop Information When Predictions Are Unavailable

Due to the nationwide AT&T 3G shutdown on June 8, NextMuni displays that use 3G modems no longer show information. We have been upgrading to 4G modems to continue to provide predictions while we roll out the new LCD display and prepare more significant system software upgrades.

For display locations remain impacted by the 3G shutdown, riders can obtain real-time stop information by using the stop ID number posted at the bus stop:

• Online enter SFMTA.com/ followed by the stop ID number (no spaces). The stop at Market and 11th streets with stop ID 13245 can be found at SFMTA.com/13245
• Text “NextMuni” and the stop ID number to 41411. For the stop at Market and 11th with stop ID 13245, send the text “NextMuni 13245” to 41411.
• Call 511 and say “Departure Times” and the stop ID. For the stop at Market and 11th with stop ID 13245, say “Departure times 13245.”

Published November 03, 2022 at 03:21AM
https://ift.tt/l3Lc6my

Show HN: I used streaming to skip downloading my 45GB dataset https://ift.tt/4Qut0N7

Show HN: I used streaming to skip downloading my 45GB dataset https://ift.tt/BSVvKgd November 2, 2022 at 09:11PM