Post

openauth is a standards based auth provider that runs on your own infra we made it work everywhere - bun, node, lambda, cloudflare, etc and here's a video where i explain how it all works www.youtube.com/watch?v=SSjN...

if you prefer to read sst.dev/blog/openaut...

Great website you have there openauth.gg

🎉🎉 congratulations. I miss this kind of service from other ecosystems, so looking forward to trying this out

Is defaulting allow to use `x-forwarded-host` a safe default? That would allow any application to retrieve an access token from the server, right?

this is a very good point - this is why i knew i had to slap a beta flag on it for at least a month i really wanted to have a default `allow` function implementation so people don't have to specify it but idk if a good default is possible