Engineering
All articles tagged Engineering.
Simple role-based access control in Ruby
Tired of tangled if statements and scattered permission logic? This post walks through the evolution from DIY role checks in Ruby to scalable, production-grade authorization using Cerbosâimproving your flow without rewriting your app.
Authorization for non-human identities (NHIs) with Cerbos
Learn all about non-human identities - what they are, why securing them is important, along with how Cerbos can be used to effectively authorize NHIs.
SPIFFE identity parsing added to Cerbos PDP
Cerbos PDP now supports native parsing and evaluation of SPIFFE identities in authorization policies. This unlocks precise access control for non-human identities (NHIs) like services, workloads, and containers that rely on SPIFFE-based workload identity.
Cerbos Prisma integration v2.0: More powerful fine-grained authorization
Latest update to the Cerbos reference Prisma Query Plan Adapter - making it even easier to enforce fine-grained access control within applications using Prisma ORM. In this blog post, weâll explore the new features, use cases enabled, and how you can start using it today.
Simple Role-Based Access Control in JavaScript
Learn how to integrate Cerbos into a JavaScript To-Do List application for robust role-based access control (RBAC). This guide covers setting up Cerbos, defining roles and permissions, and best practices for secure and scalable authorization management. Perfect for developers looking to enhance application security with fine-grained access control.
Enterprise access control in service-oriented architectures
Choosing the right access control model for your enterprise isn't just a technical decision - itâs a business one. Explore the challenges of role explosion, the advantages of attribute-based access, and how a hybrid approach can simplify authorization while ensuring compliance and security.
Authorization at the edge
Discover how slow authorization impacts user experience and why it matters for your application's success. Learn about edge authorization as a powerful solution that reduces latency, improves reliability, and enhances performance across various industriesâfrom e-commerce to healthcare. Explore real-world examples and implementation strategies to transform authorization from a security bottleneck into a competitive advantage.
Audit logs for Cerbos Hub Embedded PDPs
Weâve introduced support for capturing audit decision logs from the Cerbos Hub Embedded Policy Decision Points (ePDP) using the latest version of the Cerbos Javascript SDK. Learn how this feature enables organizations to track and analyze authorization decisions made locally in embedded environments, ensuring complete visibility and auditability, without relying on a centralized PDP or Cerbos Hub.
How to implement an authorization system for RAG using LangGraph, Cerbos and Pinecone
Dive into implementing an authorization system for your RAG app using LangGraph, Pinecone, and Cerbos. Along the way, youâll learn how to: set up a Pinecone dataset for RAG, build an Enterprise Resource Planning RAG application with LangGraph, Implement Role-Based Access Control and Attribute-Based Access Control using Cerbos.
How to implement authorization using Cerbos in Go
Learn how to implement robust authorization in a web application using Cerbos, a powerful authorization engine, and Echo, a fast and minimalist Go web framework for building our application's backend. By the end of this guide, you'll know how to set up a secure RESTful API in Go and enforce access control policies using Cerbos.
Authorization and access control in Flask
Learn how to implement robust authorization in Flask applications using Cerbos, a powerful open-source policy decision point (PDP) that separates authorization logic from your application code. This tutorial walks you through integrating Cerbos with a Flask blog application, demonstrating how to define flexible YAML-based policies that control user access and permissions without modifying your codebase.
Statements about stateless
Curious about how "stateless" systems work when everything needs state? Join long-time sysadmin Dan to learn about the core principles and real-world challenges of stateless architectureâand what actually happens when theory meets practice.
useAsyncFetcher: How to implement an asynchronous fetch function in a Remix app
Presenting remix-use-async-fetcher, a technique and library for implementing an asynchronous fetch function in a Remix application by leveraging clientLoader. Clear explanations, code examples, a functional library, and a demo app are all included!
How to build an authorization system for your RAG applications with LangChain, Chroma DB and Cerbos
Learn how to implement authorization systems for your Retrieval Augmented Generation apps. Deep dive into security concerns for RAG architecture, authorization techniques to address the security issues, and how to implement RAG authorization system using Cerbos, an open-source authorization layer.
CRDTs and collaborative playgrounds
Learn about Conflict-Free Replicated Data Types, Yjs, and how we built a collaborative, real-time playground in a web browser.
Easy way to put user role in JWT
Learn about embedding user roles in JWTs for managing access control in your applications. Use the technique described in this article with care. If you end up abusing this method, you'll fall into the bloated JWT anti-pattern.
Using Cerbos authorization with JSON Web Tokens
Learn how to implement Cerbos authorization in JWT, in a JavaScript application using Next.js. This guide demonstrates combining JSON Web Tokens for secure authentication and Cerbos' policy-based engine for robust authorization, enabling simple access control management for your APIs.
Cerbos Hub - July Product Updates
Cerbos Hub July updates: GA launch, selective policy compilation for embedded PDP, detailed build error feedback, new Playground templates, and user profile management. Enhance your authorization systems with self-contained policy bundles and streamline policy creation. Learn more about these updates in our latest blog post.