August 2023 Summaries

Elliot Dickison, CEO and co-founder of Treefort Systems, discusses how his company utilizes FusionAuth to handle authentication needs for their white-label media streaming platform, which allows organizations to create branded streaming apps without coding. Treefort initially focused on faith-based organizations but offers flexible solutions for any entity with digital content seeking to build their own audience, bypassing third-party platforms. FusionAuth's multi-tenant support, theming capabilities, and industry standards like OAuth have facilitated Treefort's expansion to 70,000 user accounts without complications. Dickison praises FusionAuth for its cost-effectiveness compared to alternatives like Auth0 and appreciates its self-hosting options and robust API documentation. Despite some challenges with theme upgrades and proxying domain names, FusionAuth remains integral to Treefort's operations, with plans to explore additional features such as device code grants for TV apps in the future.

FusionAuth has recently introduced support for unlimited custom domains in its Cloud managed hosting service. This feature allows customers to configure one or more custom domain names, enabling them to maintain branding consistency across authentication flows. The introduction of this feature was made possible by the development of a new reverse proxy architecture using AWS's Elastic Container Service (ECS) and Caddy, which supports dynamic TLS certificate provisioning without limitations on the number of hostnames. This new design includes features such as multi-AZ ECS clusters, EFS volumes for storing certificates, Network Load Balancers, Global Accelerators, and internal services for authorizing certificate management. While some additional components were required to implement a Web Application Firewall (WAF) with this architecture, the final result enables FusionAuth Cloud customers to handle any use case, including those with thousands of custom domains.

FusionAuth operates differently from similar companies in the CIAM market, being profitable, doubling its revenue year to year, and adding new logos to its customer roster daily without taking a single cent of outside funding. This "VC-free" approach has opened many doors and saved the company from sticky situations like Silicon Valley Bank's collapse. However, the startup landscape often presents success stories that gloss over failures, with investors benefiting from successful companies' success. In contrast, FusionAuth aims to tell its true story, differentiating between the glamor and reality of the startup world. The company's founder, Brian Pontarelli, shares his journey, including being turned down by Techstars, witnessing the intricate dance of the VC world, and learning valuable lessons about running a successful company. With a lean team, agile decision-making, and financial stability provided by CleanSpeak, FusionAuth has evolved into a free, open-source CIAM solution, expanding its reach in the market.

The FusionAuth React SDK simplifies the implementation of authentication flows such as login, logout, and registration in React applications, demonstrated through the FusionDesk example app. Built with React and Node.js, FusionDesk serves as a help desk application allowing users to create and view tickets. The guide details the installation and setup of the FusionAuth React SDK, including prerequisites like Node.js and Git, and provides instructions on configuring and running the FusionDesk application using Docker or manual setup. It highlights the importance of domain matching for successful token validation and the use of FusionAuth's OAuth 2.0 endpoints to streamline authentication without a separate backend. The SDK offers pre-built components and hooks for user authentication and role-based access, enhancing security with middleware to validate tokens. The application showcases various components, including login, ticket management, and profile pages, illustrating practical use of FusionAuth for user management and ticket operations, ultimately promoting secure and efficient user authentication processes in React applications.

FusionAuth has achieved significant milestones, including being ranked #1597 on the Inc. 5000 list of fastest-growing U.S. companies, largely due to its impressive revenue growth over the past three years. The company distinguishes itself by being entirely bootstrapped, having taken no venture capital funding, unlike competitors such as Auth0, which raised over $300 million before its acquisition by Okta. FusionAuth attributes its success to its commitment to delivering a reliable authentication product tailored for developers and acknowledges the crucial role of customer feedback in driving recent enhancements. In the past year, FusionAuth has achieved over 13 million Docker package downloads, introduced new features like WebAuthn passkey support, and expanded its presence in marketplaces such as AWS and DigitalOcean, while also being recognized with several awards. As the company continues to grow, it is seeking new talent across various roles to join its innovative engineering culture, offering remote work options and a vibrant local office in Denver, Colorado.

FusionAuth version 1.47, released in July 2023, focuses on enhancing performance, adding features like the ability to collect preferred languages on basic registration forms, and enabling SAMLv2 assertion encryption. Dubbed the "Performance Panther" release, it includes 21 issues, enhancements, and bug fixes to improve speed and scalability, some of which benefit all users while others are exclusive to Enterprise clients. Key updates involve reworking the internal caching system, capturing timing metrics, and enabling JVM garbage collection logging. Users of the basic registration form can now select a preferred language, enhancing multilingual support. The version also introduces SAMLv2 assertion encryption compatibility, beneficial for secure environments handling sensitive data. Additionally, updates include third-party dependency upgrades and new configurations for SAML v2 interactions. Users are encouraged to review the release notes for detailed changes and guidance on upgrading their FusionAuth instances.

Enthralled by the potential of ChatGPT to revolutionize technical documentation, the author explored its application for FusionAuth's extensive collection of documents, GitHub issues, and forum posts. Initially considering building an interface using LangChain, they found it impractical and instead turned to startups focusing on leveraging large language models (LLMs) for technical documentation. After encountering challenges with other solutions, they discovered Kapa, a startup that could effectively handle their documentation through integrations with websites and Slack. A successful proof of concept led to the rollout of an AI assistant trained on various FusionAuth resources, providing users with natural language search capabilities and links to existing documentation to mitigate inaccuracies. This assistant, launched within the FusionAuth community, aims to enhance learning about authentication while addressing the need for accessible and efficient technical support.