u/Tr0jAn14

I was building a side project that needs discord oauth and google oauth side by side, and discord is just… smoother. consent screen is cleaner, the dev portal actually makes sense, scopes are obvious, refresh tokens behave predictably.

Google has me filling out 4 separate forms just to get the app verified. apple shoves itself in the second i ship on iOS. facebook login is basically a graveyard. github is fine but limited in what it can actually return.

is discord just better engineered, or is it a UX choice that other providers could easily copy if they cared? curious if anyone has built against multiple dev portals recently and has a real opinion.

not looking for "use clerk lol", actually want to understand why the same protocol feels so different across providers.

was building a side project that needs discord oauth and google oauth side by side, and discord is just… smoother. consent screen is cleaner, the dev portal actually makes sense, scopes are obvious, refresh tokens behave predictably.

Google has me filling out 4 separate forms just to get the app verified. apple shoves itself in the second i ship on iOS. facebook login is basically a graveyard. github is fine but limited in what it can actually return.

is discord just better engineered, or is it a UX choice that other providers could easily copy if they cared? curious if anyone has built against multiple dev portals recently and has a real opinion.

not looking for "use clerk lol", actually want to understand why the same protocol feels so different across providers.

Building for users and honestly OTP infra feels way more complicated than expected 😭 Between:

• DLT registration headaches
• SMS deliverability issues
• random carrier filtering
• international SMS costs
• WhatsApp Business API pricing
• users not receiving OTPs on time

…it feels like authentication itself has become a startup problem now.

Curious what most Indian startups/devs are using currently???

Main priority is: cheap + reliable + fast delivery.

Would love to know what’s actually working at scale in right now.

Been mapping which B2B SaaS deals are stalling at procurement.

Sample is ~30 deal post-mortems I've sat through over the last 9 months across my own pipeline and 4 founder friends.

The pattern is sharp enough that I'm running it as a filter on my own pipeline now.

Dropping it here in case it's useful.

The 6 questions enterprise procurement is asking in 2026...

1. Can my IT team configure SSO themselves without your engineering team being on the call?

2. Do you have audit logs my SIEM can ingest in a structured format (CEF, JSON, syslog)?

3. Is your MFA phishing-resistant (passkeys, hardware keys, or strong app-based TOTP)?

4. Can you provide SOC 2 Type II AND your most recent pen test report?

5. Where is my tenant data stored, and can you pin it to a region?

6. If a user is offboarded from our IdP, is their session in your product killed within X minutes?

auth0 pricing + limits are starting to feel a bit restrictive for us, so exploring descope but migration looks non-trivial, especially around users + auth flows. Im kinda curious if anyone here has actually done it:

1/ how did you handle user migration? (passwords, forced resets, etc)
2/ did you rebuild flows from scratch or map them over?
3/ any issues with sessions / tokens during the switch?
4/ how was descope’s sdk + docs in practice?

ALSO BRANDS DONT PLUG UR TOOLS AS AN ALTERNATIVES.

Been seeing a lot of AI lip-sync tools lately, stuff like Sync Labs, ElevenLabs, etc. The demos look insanely good, but that’s always the polished version. I’m trying to use this for UGC-style ads (short form, fast turnaround), so things like:

1/ how natural the lip sync actually looks

2/ whether the voice feels real or still “AI-ish”

3/ and how well it holds up when you scale (multiple creatives, variations)

If anyone’s actually used these in production, would love to know..pls.

last week our second biggest account told us their internal policy straight up bans sms-based mfa and asked what else we support. we have totp, but adoption is under ~10%.

nobody wants to set up an authenticator app for the 4 tools they barely use, passkeys keep coming up, but every time we try testing it, half the team can’t get it working on their work laptops because of endpoint management policies, push would mean building a mobile app, which we don’t have.

so we’re kind of stuck in this weird middle ground where: sms is dying and totp has terrible adoption, passkeys feel unreliable in enterprise environments.

what are people actually doing rn?

i’ve integrated stripe, twilio, sendgrid, datadog, a bunch of others, docs are mostly fine. you read them, you ship but every single auth/identity provider i’ve touched (not naming names but you can guess) feels like a different story.

docs read like they were written by someone who already knew the answer and just wanted to confirm it for themselves

half the examples are for v1 sdks that have been deprecated for 3 years.

the search returns 40 results for “webhook” and none of them are about your webhook

last week i spent an entire afternoon trying to figure out what fields come back on a session refresh.

ended up answering my own question by console.log-ing the response 😭

not a docs flex but descope's docs were the reason i picked them tbh. flow builder has visual examples and the api ref

i’ve integrated stripe, twilio, sendgrid, datadog, a bunch of others, docs are mostly fine. you read them, you ship but every single auth/identity provider i’ve touched (not naming names but you can guess) feels like a different story.

docs read like they were written by someone who already knew the answer and just wanted to confirm it for themselves

half the examples are for v1 sdks that have been deprecated for 3 years.

the search returns 40 results for “webhook” and none of them are about your webhook

last week i spent an entire afternoon trying to figure out what fields come back on a session refresh.

ended up answering my own question by console.log-ing the response 😭

not a docs flex but descope's docs were the reason i picked them tbh. flow builder has visual examples and the api ref