frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Ask HN: How to implement a friction-less auth

1•wastedpotencial•17m ago
I'm kinda new to coding and developing a very simple two-player board game and need guidance in how to design the auth system. Right now I have a normal username+password auth wall for a registered users only queue and a guest system for non registered users that mints a guest account when someone not logged in queues. I'm happy with the friction-less this provides but I'm not so happy with anyone being able to spam either my guest creation endpoint or my username+pwd signup.

I love sites that offer either functional guests or fast non-email signups, but I don't know how to prevent someone from creating fake accounts and making the matchmaking awful besides rate limiting, but as the expected pool of legitimate players is small, any trivial amount of fake accounts (10s) can severely impact the queues.

I know, I know, "0 users" and "just put something out there", but I really enjoy the back-and-forth of the design and implementation, just a bit lost here so any guidance on what to do, but scoped to the small stakes of the project, would be much appreciated.

Comments

verdverm•10m ago
use oauth buttons, it's a single click for users with apple/google (i.e.)

there are several auth SaaS providers you could look to for inspiration or adoption

tl;dr - clicking a few buttons at prompts is much less effort (and more commonplace) than unam+pword

gojkoa•10m ago
Adding "sign in with google" and "sign in with apple" (especially google with FedCM) gives you auth with the least amount of friction you can get, since they end up being one-click events for most users.

Having said that, none of this prevents people from creating fake accounts. On our system I can see people regularly signin in with multiple google accounts, with incrementing digits in the name, trying to abuse the free tier. You'll need to build something yourself for that, depending on your risk surface. For us this involves tracking requests across IP addresses, blocking free access from data centre IPs, blocking bots using AWS WAF, analyzing task patterns to spot people who use multiple residential IPs and a bit more.

Largest Fan Manufacture Purchased for $5B

https://www.reuters.com/legal/transactional/madison-air-solutions-buy-germanys-ebm-papst-54-billi...
1•Rollwithit22•30s ago•0 comments

Show HN: Arzuno LeadLens (Chrome extension for finding business contact info)

https://chromewebstore.google.com/detail/arzuno-leadlens/jmjgcchbnomihgpjlbhlbgmhdeakcfif
1•arzuno•56s ago•0 comments

Show HN: PantheonGPU – GPU health testing and AI workload benchmarking

https://pantheongpu.com/
3•saqibkhan1992•3m ago•0 comments

NearMe OSINT – live map of wildfires, traffic, earthquakes and trains

https://nearme.viajeinteligencia.com/
1•mcasrom•5m ago•0 comments

Study: Flight attendants, pilots at highest risk from radiation-linked cancers

https://apnews.com/article/cancer-pilots-flight-attendants-247e445d23fd614fa424d0d5e70e188b
2•bushwart•5m ago•0 comments

Novels about secular-knowledge-preserving utopian communities

https://peterberard.substack.com/p/melendy-avenue-review-20260415-literacy
1•EthanHeilman•6m ago•0 comments

Why the US Navy Is Losing the Logistics War [video]

https://www.youtube.com/watch?v=FT784GgO8-o
2•toomuchtodo•7m ago•0 comments

Nvidia GeForce Now Adds Firefox Support on Windows

https://blog.mozilla.org/en/firefox/firefox-nvidia-geforce-now-partnership/
2•pentagrama•8m ago•0 comments

Environmentalism Should Be Empirical [Review: No to Nuclear]

https://www.onethousandmeans.com/p/environmentalism-should-be-empirical
1•alexeigannon•9m ago•0 comments

Show HN: Excelsior – A New Word Game

https://microtopathy.neocities.org/excelsior/
1•CaesarA•9m ago•0 comments

Chat with an LLM powered with lip-sync to see it talking

https://neuronfriend.com
1•nvinacur•10m ago•0 comments

Show HN: Voidleap Code – agentic IDE, own harness, swap models mid-conversation

https://voidleap.com/
2•nileback•11m ago•1 comments

Poolside Desktop Assistant, for macOS

https://poolside.ai/blog/introducing-poolside-desktop-assistant
1•Bluestein•11m ago•0 comments

Small webshops struggling with new EU rules around packaging waste

https://nltimes.nl/2026/08/14/small-webshops-struggling-new-eu-rules-around-packaging-waste
1•zczc•11m ago•0 comments

Show HN: Stingle Photos – Open-source E2EE photo backup, revived after hiatus

https://stingle.org
1•al5865•11m ago•0 comments

Star Citizen's disastrous Siege of Orison stream

https://tbreak.com/star-citizen-stream-disaster-siege-of-orison/
1•speckx•12m ago•0 comments

Most cited Xkcd comics on Hacker News

https://www.orangecrumbs.com/xkcd-on-hacker-news/
1•oyster143•12m ago•0 comments

Code review is broken. The pull request is the wrong place to start

https://nextwaveoftech.com/posts/code-review-is-broken-pr-wrong-place
1•jameslaneyno9•13m ago•0 comments

Projects in Buzz

https://engineering.block.xyz/blog/projects-in-buzz
1•ThomPete•14m ago•0 comments

Google Workspace will enable AI note-taking by default for some customers

https://workspaceupdates.googleblog.com/2026/07/new-google-meet-take-notes-for-me-settings-for-ad...
5•m-hodges•14m ago•0 comments

What happens when a GPU reads memory

https://blog.doubleword.ai/what-happens-when-a-gpu-reads-memory
1•corysama•14m ago•0 comments

Designing Loops for Production-Grade Work

https://www.liquid.ai/blog/agent-loops
1•pember•15m ago•0 comments

Biboumi – XMPP Gateway to IRC

https://biboumi.codeberg.page/doc/
1•birdculture•15m ago•0 comments

The road to epsilon-zero: Productive programs and well-founded orders

https://blog.plover.com/math/ordinals/05-shortlex.html
1•pavel_lishin•16m ago•0 comments

Everyone is asking someone else for money

https://www.gonzocapital.net/everyone-is-asking-someone-else-for-money/
2•robocat•16m ago•0 comments

Blender v1.0 – Web Port of the 1995 Build

https://blender1995.com/
1•cautiouscat•17m ago•0 comments

Ask HN: How to implement a friction-less auth

1•wastedpotencial•17m ago•2 comments

TikTok Exploring Sending Money via Direct Messages

https://www.bloomberg.com/news/articles/2026-08-18/tiktok-is-exploring-feature-to-send-money-over...
1•htrp•17m ago•0 comments

Calendar.txt

https://terokarvinen.com/2021/calendar-txt/
1•smartmic•18m ago•0 comments

Show HN: Deft Writing, an AI lab for non-slop LLMs

https://deftwriting.com
2•rosmine•18m ago•0 comments