September 2024 Summaries

A self-hostable developer tool offers several benefits, including control over data locality, performance, and software versions, as well as the ability to operate in offline or limited network environments. This can be particularly appealing to developers who prefer to have more control over their application infrastructure. The tool also provides a potential revenue stream through premium support, advanced features, hosting, and custom development services. However, building a self-hostable product requires careful consideration of technical challenges such as minimizing dependencies, supporting heterogeneous environments, and adjusting to releases with limited rollbacks. Additionally, the business model must be carefully planned, including options for monetization such as offering a free-as-in-beer version or a non-OSS license. The key to success lies in identifying the right use cases, targeting customers who value control and data locality, and providing robust tooling and documentation to support their needs.

FusionAuth is participating in this year's Hacktoberfest, a global event that encourages developers to contribute to open-source projects. To participate, register for Hacktoberfest and submit PRs to FusionAuth or other repos with the #Hacktoberfest label. This year, FusionAuth focused on its JavaScript and Mobile repositories, adding tags and issues related to the event. The JavaScript repository includes examples of using various frameworks such as Angular, Gatsby, and React, while the Mobile repository features an example with Expo's React Native Quickstart.

FusionAuth supports two main approaches to application session management: centralized session management and application managed sessions. A user session refers to the period during which a user interacts with an application, typically beginning when the user first accesses the site and ending when they log out or remain inactive for a predefined period. With FusionAuth, there are three types of relevant sessions: application sessions created after authentication, FusionAuth SSO sessions available only when using hosted login pages and a browser or webview, and centralized sessions represented by refresh tokens. Centralized session management allows tracking of user sessions across different applications, while application managed sessions require each application to manage its own session individually, with less control over session timeouts and no central view in FusionAuth. The choice between centralized and application managed sessions depends on the application's needs, with centralized sessions offering more flexibility but also implementation complexity and reliance on FusionAuth's APIs.

The Authorization Code Grant flow is a widely used method in OAuth 2.0 that enables users to securely authenticate with third-party applications by redirecting them to an authorization server, obtaining an authorization code, and then exchanging that code for an access token. This process involves several steps including setting up the authorization request, handling the redirect, exchanging the authorization code for an access token, and using the access token to authenticate API requests. FusionAuth's sandbox environment provides a simple example of this flow, allowing developers to easily integrate authentication into their applications while minimizing the risk of sensitive data being spread across multiple applications. The use of FusionAuth also enables the addition of features like profile management, Multi-Factor Authentication (MFA), and session management without burdening the application, making it an attractive solution for enhancing user experience with passkeys.

We recently released version 1.53.0 of FusionAuth, which introduces a new Lambda-based login control feature that allows for fine-grained authentication decisions based on user groups and email addresses. Additionally, this release adds a webhook event log to provide a historical record of events and their responses, fixing a previous limitation. The update also includes performance optimizations and bug fixes, as well as support for Java 21. Furthermore, FusionAuth has become even easier to try out with a new trial plan that requires no credit card to get started.

The concept of Identity has evolved from a simple login mechanism to a multi-dimensional, value-adding asset for businesses. Understanding and leveraging Identity can unlock tremendous potential, especially for web-centric businesses that serve consumers. The early days of Identity were marked by the rise of Single Sign-On (SSO), which allowed companies to connect multiple services behind a single sign-on experience, enhancing user convenience and security. Today, Identity contributes to streamlined user experiences, improved security measures, and highly personalized services for users, enabling businesses to gain valuable insights about their customers' preferences and behaviors. By consolidating fragmented identities through SSO, organizations can develop a deep understanding of customer preferences over time, track interactions, and inform the development of new applications that leverage this data, ultimately leading to increased revenue opportunities.