Top all-time · #18827
Curity Identity Server
Company blog · curity.io/blogsecurityprogramming
Curity Identity Server is the company blog at curity.io, writing about security and programming. Since 2021, 4 different Hacker News readers have linked it 7 times. It is still writing: the last post was on 2026-10-09, and you can follow it by feed.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN commenters link curity.io for discussion of digital identity, the Curity Identity Server and its free community edition, and an auth resource. Comments are few and mostly describe the product rather than judge the writing.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The access layer your business runs on. Authorization and authentication for APIs, AI agents and humans. Built for the organizations that can't afford to get it wrong.
What Hacker News says?
Nothing protects you if you're up against a state. That doesn't mean we should give up completely. Do you have a passport? That's a real identity in most places. Soon, it may be possible to use that to link your identity to a set of public keys which you can then use to identify yourself. There's a lot of work to be done to make this a reality, but work is surely going on right now and this is going to be possible o…
Comment linking /resources/learn/verifiable-credentials/
on “Reflections on Distrusting xz”Submitted A privacy-preserving token usage pattern for microservices as a story · 3 points
HN discussionNot open source, but free as in beer: https://curity.io/product/community/ It's a complex server, but if you need to connect to lots of third party systems it may be a good choice as it has support for all sorts of things and its plugins are open-source (e.g. BitBucket plugin: https://github.com/curityio/bitbucket-authenticator )
Comment linking /product/community/
on “Why outsource your auth system?”Submitted User Consent Best Practices in the Age of AI Agents as a story · 1 points
HN discussionI would highly recommend this also,- but firstly you need to understand how it fits into an organisational system. I founds this YouTube very informative as to how [all these things hang together]( https://youtu.be/cUQcNi_obIc?si=HtZ9iLc76KF2iB2L ). [This is perhaps relevant for passkeys]( https://fedoramagazine.org/fido2-for-centrally-managed-users... ) Alternatively you can go down the OIDC or SAML paths (generall…
Comment linking /resources/openid-connect/
on “Ask HN: Any comprehensive courses on Auth?”Submitted Is Your API Ready for the AI Agents? as a story · 1 points
HN discussionSubmitted JWT Security Best Practices as a story · 1 points
HN discussion