Skip to content

Comment on Ask HN: Ok to only allow Google/Apple/FB login for mobile app?

Comments

I'm working on a food ordering app.

Just use SMS (enter phone number, text me a code, enter the code). They'll need to provide a phone number for the food provider or deliverer to contact them anyway.

Password managers may or may not work in an app.

Password managers work fine with apps.

Implementing password auth (as well as registration, password-reset/etc) is not trivial.

You absolutely shouldn't roll your own user management or authentication at this point. It's extremely difficult to write such a system securely from scratch, and there are a million SaaS products that do it.

Auth0 is respected, well-known, and not expensive[1]. The admin UI for devs is sometimes annoying, but their support is excellent and free.

Do I need to authenticate users at all?

...Maybe. You need some way for users to recover their order history if they lose their phone, for example. Perhaps there's a way you can get a unique identity through the Stripe process, not sure.

1. https://auth0.com/learn/two-factor-authentication/

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.