Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar • Hacker News Board

Re: Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

#11

Post by ogazitt » Mon, Nov 06, 2023, 4:52 PM UTC

bradhe wrote: post #9

Been fun to watch this project progress. I have tried it out in a few apps before. Love the test harness, that's super useful!

Thanks! "topaz test" is already pretty useful, and we hope to bring assertions into the visual console in a future release.

Re: Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

#12

Post by ogazitt » Mon, Nov 06, 2023, 4:53 PM UTC

gertd wrote: post #6

I love the fact it is bring relational and attribute based together, happy birthday Topaz !

Thanks! ABAC and ReBAC are indeed complementary, and you can build powerful authorization models by combining the best of these.

Re: Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

#13

Post by ogazitt » Mon, Nov 06, 2023, 4:55 PM UTC

apoland wrote: post #2

Congrats to the Topaz team. This project has had some huge advancements since it launched last year.

Thanks! Do let us know what your favorite feature is in the 0.30 release :)

Re: Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

#14

Post by janczukt » Mon, Nov 06, 2023, 6:01 PM UTC

It is great to see this release coming together. I am working on a new app right now. While authentication is a solved problem with services like Auth0, how to set up a robust authorization mechanism left me scratching my head. With Topaz, the decision to not built it myself was easy. Topaz is to AuthZ what Auth0 is to AuthN. Congrats on the release, very timely!

Re: Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

#15

Post by ogazitt » Mon, Nov 06, 2023, 6:15 PM UTC

janczukt wrote: post #14

It is great to see this release coming together. I am working on a new app right now. While authentication is a solved problem with services like Auth0, how to set up a robust authorization mechanism left me scratching my head. With Topaz, the decision to not built it myself was easy. Topaz is to AuthZ what Auth0 is to AuthN. Congrats on the release, very timely!

Thanks! That's exactly the analogy we think of... Auth0 : AuthN :: Topaz : AuthZ :)

Re: Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

#16

Post by gblock72 » Mon, Nov 06, 2023, 6:19 PM UTC

Congrats! Great to see the evolution and love how it scales. If I never have to implement authZ again, that will be a happy day :-)

Re: Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

#17

Post by ogazitt » Mon, Nov 06, 2023, 6:53 PM UTC

gblock72 wrote: post #16

Congrats! Great to see the evolution and love how it scales. If I never have to implement authZ again, that will be a happy day :-)

Thanks! Yes, the days where you have to hand-roll authorization logic are (hopefully) soon to be behind us :)

Re: Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar

#18

Post by milo_a_hoffman » Mon, Nov 06, 2023, 8:03 PM UTC

ogazitt wrote: post #4

milo_a_hoffman wrote: post #3

How does this compare to other CNCF solutions like OpenFGA and OPA?

Thanks for the question! Those are both great projects. Topaz combines the best elements of both: * It uses OPA as its decision engine and Rego as the policy language, and supports the "policy as code" methodology * It also implements a ReBAC directory, much like OpenFGA, in the same container image. It goes further, by allowing you to store not just relationships between subjects and objects, but also properties...…

[dead]