Ask HN：你们在使用什么进行身份验证/授权和支付？
2 分•作者: jftuga•3 个月前
多年来我有一些副项目想法，但从未实现过，因为我缺乏以下方面的知识（但愿意学习）：
* 实现社交登录（OAuth）、账户管理等。
* 管理后端权限（RBAC 总是看起来比实际更复杂）。我的项目可能有三个层级：免费、爱好者、专业。
* 安全地处理支付，同时实际监控滥用/入侵。
哪些社交登录可以集成到您的项目中？
您正在使用什么进行身份验证/授权？我的项目流量会非常低，所以不想承担高昂的月度费用。您是自己构建还是使用 Auth0/Clerk/Supabase 进行身份验证，以及 Stripe 进行支付？我熟悉 AWS、Cloudflare、Go、JS 和 Linux。是否有我可以参考的 GitHub 仓库？
像 Claude Opus 这样的前沿 LLM 在为此类事情生成清晰、可审计的代码方面表现如何？有人真正信任 AI 编写的身份验证/支付代码吗？您是如何审查的？
查看原文
I've had a few side project ideas over the years but have never implemented one because I lack knowledge in <i>(but willing to learn)</i>:<p>* implementing social logins (OAuth), account management, etc.<p>* managing backend permissions (RBAC always looks more complicated than it should be). My projects might have three tiers: free, hobbyist, pro<p>* handling payments securely while actually monitoring for abuse/intrusion<p>Which social logins are allowed to tie into your project?<p>What are you using for authn/authz? My projects would be very low traffic, so I wouldn't want to commit to a big monthly spend. Are you rolling your own or using Auth0/Clerk/Supabase for auth and Stripe for payments? I'm comfortable with AWS, Cloudflare, Go, JS, and Linux. Are there any GitHub repos that I can look at for this?<p>How well do frontier LLMs (Claude Opus, etc.) do at generating clean, auditable code for this kind of thing? Is anyone actually trusting AI-written auth/payment code and how do you review it?