Going from miniapp to full app is an eye watering amount of work to undertake.

Most builders will “skip” authentication by putting themselves in debt with a centralized product.

If you fumble this or can’t manage that vendor you’re not going to make it far in building other pieces.

at some point “don’t roll your own crypto” got morphed alongside “don’t roll your own auth” which sucks cause one is really good and necessary until you need to implement SSO then it’s hell

u make a users table u have a hashed_password column in the table u bcrypt or crypto module to encode their password alongside a salt u check the dash if it matches u generate a JWT with their user id

What would be the ideal alternative?

What’s the best open source auth solution if building your own auth?

OAuth 2.0 was a huge mistake and has set us back decades in internet and online economic freedom..