Viewing profile — alex-olivier

OPA and its derivative projects really brought the idea of decoupled authorization as a viable option. It is a very powerful tool which can be applied to many layers of the archite…

tldr

(Disclaimer: I work for Cerbos[1]) When we started working on Cerbos[1] the very first external bit of tooling we released was the Cerbos Playground[2] which does exactly what you …

When it comes to Authentication and Authorization, these are both core components of a system but undifferentiated building blocks so wouldn’t recommend building them yourself. Typ…

Not the only permissions issue at GitHub https://cerbos.dev/blog/githubs-inconsistent-access-control

Disclaimer: I work for Cerbos[0]. Whilst this is a very good approach when all your data is stored in a single datastore, as applications grow it is common to start breaking out in…

(I lead product at Cerbos[1]) Certainly agree and we have seen a lot of cases of JWT tokens getting bloated with more and more authorization data. Using JWTs to hold the autheNtica…

Thanks for the feedback - are are working on adding more comparisons of technologies onto https://cerbos.dev and will certainly make sure to include OAuth

We are working through the priority list of SDKs. You can find them all on https://github.com/cerbos/ Node, Java and Go are already available and other languages are coming very so…

Author of the article here. This is a very common question we get. OAuth is great for when the permissions can be modelled as a set of roles/scopes which apply uniformity. Where th…

What help do you need? It's free and open source - https://cerbos.dev/

Disclaimer: I am Product Lead @ Cerbos[0] - an open-source authorization service This article is a great summary of exactly why this area is rife for innovation and we love seeing …