Approaching Access Control on the Web (Part I)
1–10 of 41 posts
Re: Approaching Access Control on the Web (Part I)
#2Hi there! From experience we know how hard auth* systems can be. There are a million ways to get what you want. We also see the issue that developers usually start with a least-effort approach (username + password) which needs refactoring later on. The intention of these articles is to give you an overview of what exists and help you choose the best approach with as much information as you can get. We hope that this saves you some time. If you haven't heard from us before, I welcome you to check out our open source products which are all related to auth*: https://github.com/ory
We will plug some of these (and other) open source products in the articles, but we really want to teach you something. There is so much SEO-optimized onboarding (for expensive blackbox SaaS) content with little substance on this topic. We really hope this helps you!
One last thing: We hope it's ok that the other parts are not ready yet. Aeneas (author of the guide) is trying to push out one ~ every month! Getting this content right is a lot of work :)
Cheers!
Re: Approaching Access Control on the Web (Part I)
#3This looks great. Looking forward to the coming parts.
Re: Approaching Access Control on the Web (Part I)
#4Nice! I've been looking for something like this for ages. If I could make a wish, I'd love to see some sort of interactive stuff, or at least visualisations of for example username/password -> cookie exchange. To make it easier to digest. Not everyone prefer to learn by reading :)
Re: Approaching Access Control on the Web (Part I)
#5Nice! I've been looking for something like this for ages. If I could make a wish, I'd love to see some sort of interactive stuff, or at least visualisations of for example username/password -> cookie exchange. To make it easier to digest. Not everyone prefer to learn by reading :)
Hey! That's a great point. John (our designer) is currently on vacation but he will create some animated SVGs which make this easier to digest!
We were also thinking to have an interactive "decision map" where you start with what type of application you develop (e.g. prototype, distributed app, ...) and step-by-step come closer to a recommendation from us. We might also include some software in the last step to guide you to the right pieces. Would that be something you'd like to see?
Re: Approaching Access Control on the Web (Part I)
#6OP: Hi! Anyone ever tell you your logo looks strikingly similar to Palantir's?
It was enough to make me wonder if Ory is a Palantir offshoot, which doesn't appear to be the case.
Re: Approaching Access Control on the Web (Part I)
#7OP: Hi! Anyone ever tell you your logo looks strikingly similar to Palantir's? It was enough to make me wonder if Ory is a Palantir offshoot, which doesn't appear to be the case.
Never :) No affiliation with Palantir!
Re: Approaching Access Control on the Web (Part I)
#8Recommendation for the owner of the site: The line-height is set too high. It should be max. 1.7
Re: Approaching Access Control on the Web (Part I)
#9OP: Hi! Anyone ever tell you your logo looks strikingly similar to Palantir's? It was enough to make me wonder if Ory is a Palantir offshoot, which doesn't appear to be the case.
Never :) No affiliation with Palantir!
Well, I suppose I'm the first.
If I can inquire further: are you open to discussing ORY's revenue model? I love organizationally-backed open source projects pertaining to security as there's a less than savory trend in this space for tools to go unsupported after original maintainers have moved on, but I have a bad habit of loving them less when I can't quite nail the business model of the primary entity supporting the projects. I see consulting is likely some part of it, and my guess is there's a product ORY is working on which will monetize an extension of either/both Hydra and Oathkeeper in the future, but hopefully you can see why I'm asking for a more definitive clarification and are in a position to shed some light.
Re: Approaching Access Control on the Web (Part I)
#10Earlier quoted context omitted.
Never :) No affiliation with Palantir!
Well, I suppose I'm the first. If I can inquire further: are you open to discussing ORY's revenue model? I love organizationally-backed open source projects pertaining to security as there's a less than savory trend in this space for tools to go unsupported after original maintainers have moved on, but I have a bad habit of loving them less when I can't quite nail the business model of the primary entity supporting t…
Hi, mostly consulting, sponsorship and paid additions to the open source ecosystem. In the future we'll offer managed cloud services. We're not doing open core though, if that's what you're getting at :)