February 2022 Summaries

The article describes the process of improving the community onboarding experience in the Ory Community Slack by developing a custom Slack bot using the Slack Events API, hosted on AWS Lambda. Initially, the onboarding was impersonal and one-way, prompting the Ory DevRel team to seek a more personal and interactive approach by messaging each new member directly to understand their challenges and guide them accordingly. The article details the technical implementation of the bot, utilizing the Go programming language, Slack Events API, and AWS Lambda, highlighting the differences between WebSockets and the Events API. It explains the steps for creating, configuring, and deploying the bot, including generating OAuth tokens, setting environment variables, and configuring AWS Gateway. The author emphasizes the cost-effectiveness and simplicity of using the Slack Events API and AWS Lambda for hosting small-scale bots without incurring significant expenses.

Starting a business involves embracing resilience and perseverance, particularly when aiming to achieve product-market fit, which is crucial yet challenging, especially when targeting enterprises. The blog shares insights from experience at companies like Amazon Web Services and O2-Telefónica, emphasizing that enterprises are composed of diverse individuals, and finding a universal approach is unlikely. It suggests using the DIA process—Discover, Imagine, Act—to navigate challenges. During the Discovery phase, understanding the real problem and enterprise needs is vital, alongside aligning user and buyer priorities. The Imagine phase involves visualizing adjustments and leveraging insights for product refinement, while selecting the right partners and facilitating internal sponsorship are crucial. In the Act phase, timing and preparation are key to building trust and securing contracts, with an acknowledgment that enterprise sales cycles can be lengthy. Patience and strategic relationship-building are emphasized, ensuring startups remain relevant and adaptable to organizational changes while pursuing enterprise clients.

LoginWithHN.com (LWHN) is an unofficial OAuth2 and OpenID Connect provider tailored for the HackerNews community, aiming to simplify the login process for developers who want to engage with this tech-savvy audience. The project, powered by Ory Hydra, offers an innovative authentication flow by allowing users to verify their HackerNews profile through a unique code or phrase, which they must display publicly on their profile page. Initially, the integration of node-oidc-provider with NestJS proved challenging, prompting a switch to Ory Hydra for its ease of use and comprehensive documentation. The system is designed to accommodate future expansions, such as karma restrictions and YC founder verification, while already providing a functional OAuth2 server and client setup. This initiative not only enhances user convenience but also maintains security, making it a valuable tool for developers targeting the HackerNews community.

In this detailed exploration of user authentication and access control in Python using Flask, the author demonstrates how to integrate Ory Kratos and Ory Keto for managing user identities and permissions efficiently. The setup involves using Flask Cookiecutter to structure projects and Docker alongside Docker Compose to manage containers for running Postgres services, which serve as databases for Ory Kratos and Keto. Ory Kratos is responsible for user authentication, storing identity data like email and passwords, while Ory Keto handles access control by managing permissions for different resources within the application. The article emphasizes the importance of using command-line tools for handling permissions, despite the lack of a user interface, and highlights the benefits of automating these processes through CI/CD pipelines. Additionally, the author suggests using SDKs for Ory Kratos and Keto to enhance code readability and advises on future improvements, such as adding two-factor authentication, social sign-in features, and more robust password policies. The complete code for the project is available on GitHub, providing a practical resource for developers looking to implement similar authentication and access control systems.