#038 - I Got Caught Rolling my Own Auth... feat. Dev Agrawal

Backend Banter

Content provided by Boot.dev. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Boot.dev or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

4M ago 1:06:56

MP3•Episode home

Lane chats with Dev Agrawal— content creator & Developer Advocate at Clerk! Tune in as they discuss DevRel, authentication vs. authorization, JWT, and so much more in this episode.

Learn back-end development - https://boot.dev
Listen on your favorite podcast player: https://www.backendbanter.fm

Dev's Twitter: https://twitter.com/devagrawal09
Dev's Youtube: https://www.youtube.com/@devagr

(00:00) - Introduction
(00:50) - Is Dev's name really Dev?
(02:10) - What is it about writing code that scares Dev?
(02:50) - JavaScript is one of the worst with dependencies
(03:09) - Dev's ideal world
(03:20) - .NET and Blazor
(03:59) - Blazor explained
(04:36) - WASM on the Front-end
(05:04) - Is Blazor unique to C# ?
(06:11) - What is a DevRel?
(08:07) - Lane's experience
(09:13) - You shouldn't roll your own Auth
(11:59) - Undifferentiated work
(13:56) - Authentication vs Authorization
(16:19) - Regarding Auth, which is a bigger pain point for companies
(16:48) - Pain points of Authorization
(18:38) - Pain Points of Authentication
(20:23) - Lane's perspective
(22:29) - Using a third party for authorization
(24:27) - Is Clerk used for both Authentication and Authorization?
(26:16) - JWT explained
(28:39) - Where is the users' data stored?
(29:27) - Features are developed as needed
(29:52) - Auth coupling to the rest of the system
(30:16) - Webhooks listeners to access user session data
(31:03) - Postgres foreign-data wrapper
(32:09) - Microservices sharing databases
(34:29) - CQRS
(37:37) - Average size of a company that uses Clerk
(40:50) - What are the most used ways to sign-in
(42:04) - Stances on passwords
(46:56) - OAuth
(50:33) - Why Lane dropped Sign-in with Twitter/X
(51:14) - What do popular services usually use?
(52:24) - Sign-in with Google
(57:39) - Unpopular opinion on Auth related web architecture
(01:00:17) - 2 ways of doing authentication
(01:05:59) - Where to find Dev

57 episodes

#Tech #Boot.dev #Backend #Golang #Python #Software Development #Software Engineering #Web Development #Backend Engineers #DevOps #Cloud IT #Database