Post

I'm working on `ash_authentication` igniters for @ashframework.bsky.social. It is a "happy medium" between codegen and library for authn. This is my most involved igniter and it's going *very* well. Some snippets from the base installer, up next is phoenix integration & strategies!

4 reposts7 likes

This means you can't footgun yourself and remove the password validation, for example. And if we find a security vulnerability, we can patch it, unlike a fully code generated solution 😎

Those who have used AshAuthentication will see how this really makes things much more clear. Instead of behavior, attributes, actions etc. being *implicitly* added, they are *explicitly* added to your resources. You can adjust them, but the core requirements of them are *validated* by the extension.