Full-stack Auth for React/Node by Wasp — Free OSS auth without 3rd party services, deploy anywhere

@theological Thanks so much for the comment! Really glad you like it and appreciate the support :)

@sentry_co Good question! IMO the answer is not black and white and depends on what you need. But, if you use your database to store your users' data (not username/pass, but everything else they do in your platform), which is often even more sensitive than auth data, why wouldn't you also trust your database with the auth data?

@sentry_co Wasp automatically encrypts your user's auth data (e.g. password). For the rest of the data it often isn't encrypted by default, that depends on the use case.

@theankurtyagi The main difference is you don't have to implement or maintain anything by yourself! Wasp Auth also uses passportjs and best practices under the hood, but it is an integrated solution and allows you to move super quickly. There are still more features we want to add (e.g. more providers, more customizability), but that is the core idea. Keep it as simple as possible and free of any charge.

@kingromstar with Wasp, all you need to do is define your DB models and the type of Auth you want in your main config file, and Wasp glues it all together for you, and generates the UI components. Wasp does the work of configuring the NodeJS server for you so that the logged in user is passed in context. You actually don't have to touch any of this code -- it's all continuously compiled for you by Wasp. You just define the features in the config file, write your server functions and React pages, and it does the rest.

@hot_town so how do we manage sessions if we need to or how do we extend the functionality of this API? Or is this considered a separate service and we run our actual business logic API elsewhere?

@hot_town @kingromstar Some parts are customizable to some degree, some parts are opt-out, and everything at the end is opt-out, but you can also extend a lot of stuff, for example you can add Express middleware and similar. For example, you can customize our forms on the client to some degree via their properties, or you can drop them and use a bit lower-level API (so your components, but we give you functions to call for stuff like login(), signing(), ...). It is not a separate service, it is instead part of the framework -> so functionality that gets activated for you both on frontend and backend, and has its own API that you can use to degree you want to. When you say "how do we manage sessions", what specifically do you have in mind?

@kingromstar for me to better understand -> what is a blocker for you? You are worried about not having enough flexibility? I also used to roll my own auth with Passport.js and Node before, but I prefer getting all this out of the box instead, so I am curious to understand what exactly makes you not like this?

@zvonimir_sabljic1 Yeah, here's the docs: https://wasp-lang.dev/docs/auth/... And the secret sauce is in Wasp's use of a main config file which has your entire app in context and is able to compile the code together cohesively.

@adi2710 Thanks for your support! :) Also feel free to join our Discord, we have a quite vibrant community sharing their projects and helping each other: https://discord.gg/rzdnErX

@manan_sadana Thanks Manan! I hope you had a good experience, and your questions also helped us improve some parts of Wasp (e.g. the one regarding the Railway deployment and Prisma issues).

@manan_sadana so glad it helped you speed up your development and product launch 🚀

@martin_sosic I want to thank the team for such a quick response on the issue that I was facing. I got a hotfix which solved the problem and later I was really amazed to see proper fix for it was out to production in a day. Great work!

@hikaru_nagashima Thanks. The best part is that there are WAAAAY more amazing free features packed into Wasp as a full-stack framework. Auth is just the tip of the iceberg :)

Thanks! @julienergan 🙏

@anshgoyalevil thank you! I used Auth0 in the past and still like them! We are trying to go for a more minimal solution that is part of your codebase, part of the framework. In the future we might also look into having an integration with Auth0, that could be interesting.

@dc_man It is similar! Wasp is kind of similar to NextAuth, but is tightly integrated with Wasp, and truly full stack. Right now we use Passport.js in the background. We might look into Lucia Auth in the future also.

@oginokairan Really appreciate it 🙏

@jakepage Thanks! Let us know what you think :)