uranther
What combination of libraries do you use for your Phoenix web app for standard user authentication? There are a couple listed in the awesome-elixir list, notably, ueberauth.
What I am looking for is a basic user account (email/password), register, login/logout, forgot password, and roles/groups for ACL. I want an admin panel for managing users, too, but I realize I will probably have to build this out.
Most of what I see is for basic JSON Web Token (JWT) authentication for API backends or similar. So I am a little confused about the standard practice for user auth in a plain ol’ web app.
I bet this has been blogged about somewhere… ![]()
Trending in Discussions
The obligatory hello world thread!
Who are you and where are you from? :stuck_out_tongue:
New
Hey there,
It’s been more than a year since we started using LiveView as our main UI library and building a whole library of UI componen...
New
Hey folks,
I wanted to share with you a project I’ve been working on for a while: It’s an Open Source (AGPLv3) newsletter tool. Think Ma...
New
Hi everyone :waving_hand:
I wanted to share something I’ve been building — NowBlind, a random chat app designed to help people discover ...
New
In my third year of college, around 2010, I found Erlang. A few years later, I found Elixir. I liked the ideas at once: many small proces...
New
I’ve been tinkering with Lynx (by José) via hold_ledger. I used AI to write the code, a separate specification, the tests, and the Lean p...
New
Hi everyone,
I have 8 years of production experience with Erlang/OTP and I’m just starting to get to know Elixir. What would you learn f...
New
Other Trending Topics
Hey there,
I haven’t seen a list of useful Elixir specific skills for the popular AI tools yet so I’m starting one here with my first.
...
New
I fully migrated to my own harness from Anthropic/Gemini and I think it’s time to share it. Welcome DSH, the DeepSeek Harness, fully writ...
New
Hey. Is there anyone here who creates agents in their apps? Not talking about using agents, but creating them. I’m finding it pretty diff...
New
(I just needed to vent somewhere and LinkedIn is full of hope, or hype, I’m not sure which exactly)
AI dream has many faces, but general...
New
Localize is the next generation localisation library for Elixir. Think of it as ex_cldr version 3.0. The first version will be released ...
New
Beam Bots (or just BB for short) is a framework for building fault-tolerant robotics applications in Elixir using familiar OTP patterns. ...
New
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #code-sync
- #discussion
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #ai
- #umbrella
- #elixirconf-us
- #full-time-contract
- #podcasts-by-brainlid
- #blog-post
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #elixirconf-eu
- #processes
- #security
- #api
- #forms
- #performance











Showing Posts 1 to 10- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
AstonJ
I will probably roll my own, but I’m interested in hearing what others have to say here.
Did you look at what’s in hex.pm btw? Basic_auth seems to be fairly popular.
uranther
I took a browse through hex.pm but didn’t see anything promising except
authenticwhich doesn’t seem to be a real thing (the GitHub repo is an empty project).Basic_authwould be fine for the simplest apps, but what I am looking for is user account management and maybe even profiles.I think you are right about roll-your-own, but I am still pretty new to Elixir/Phoenix, and not sure how to go about it.
AstonJ
Are you from a Ruby/Rails background? If so there is an excellent series on user authentication at Rails Casts - when I come to roll my own I hope to do something similar to that.
(Btw I have just added ‘Languages you are interested in’ and ‘Languages you have used’ fields to our profiles)
uranther
I am from the PHP Symfony/Laravel side of things, but I don’t have that much experience in either.
AstonJ
Ah right, well you’re in for a treat with Elixir and Phoenix then (no offence to any PHP developers
)
With regards to your question, hopefully some others will chime in, but I would have thought watching a Laravel tut on auth should give you a fairly good idea on what you will need to implement in Phoenix, if not there is a very old Railscast on the topic that might be closer to Phoenix (this is just a guess as I’ve not learned any Phoenix myself yet).
Mandemus
A lot of the Phoenix blogs I see seem to use guardian. It’s also JWT based. The exception being the Trello clone tutorial. They appear to be rolling their own authentication system.
I get that Phoenix wants to remain authentication agnostic. However this makes me curious as the big feature in the next iteration of Phoenix is channel presence. Not sure how they plan to implement that without having any built-in conception of a user.
uranther
I found this Phoenix/Guardian example app which seems to have all I need. I am trying that out now.
World_Reactor
I am working on a project myself and I am considering using Openmaize.
I found a great example which demos all the basic functionality you mentioned and more.
Hope this helps!
uranther
Great find! This looks a lot simpler to get setup.
sashaafm
uberauth/guardian seems to be very common and popular.
The Programming Phoenix book and other beginner friendly resources use Comeonin which has Bcrypt (not sure if it can be considered exactly the same as Guardian?). I’ve been using it in my project and it’s nice.
There’s also Basic Auth which I’ve used in a blog. It’s pretty simple and it’s just to setup an authentication form to access certain pages and resources (useful for a blog since only you want to access the create new post action and so on).