Engineering
All articles tagged Engineering.
Navigating authentication and authorization: Harnessing the power of Microsoft Entra External ID and Cerbos for enhanced application security
Discover how to integrate Microsoft Entra External ID with Cerbos for robust web application security. This guide covers setup, user flows, permissions, and fine-grained authorization to enhance authentication and authorization practices, essential for developers aiming to build secure and scalable applications. Read our detailed tutorial now.
Cerbos PDP v0.37.0 Release Highlights: REPL autocomplete, Kubernetes DaemonSet and more
The v0.37 release of Cerbos PDP adds support for autocomplete when using the Cerbos REPL, new Kubernetes deployment options and updates to the AdminAPI.
Cerbos v0.36.0 Release Highlights: Technical Enhancements and Developer Features
Cerbos v0.36.0 enhances the efficiency and functionality of policy-driven access controls. This version introduces asynchronous audit logging, refined Kafka backend handling, and new administrative commands, all designed to optimize performance and scalability.
What the heck is a principal?
And why we built Cerbos the way we did.
What is an authorization API?
An authorization API lets you implement access control policies and authorization independent of your core solution. It also forms a part of bigger trends towards centralized authorization strategies and zero trust models to prevent security incidents.
Cerbos PDP v0.34.0: Enhanced usability and security
With the release of Cerbos PDP v0.34.0, we've taken significant strides in enhancing the usability of our software and bolstering security measures to ensure your applications remain secure and compliant with the latest standards.
Cerbos Hub’s Collaborative IDE: Craft access control policies in your browser in real-time
This article introduces the in-browser IDE Playground, available to Cerbos Hub users. The playground is designed to streamline access control management, providing a central collaborative environment for developer, product, or security teams to work on authorization policies together.
The Secret Ingredients: protobufs and gRPC
Find out how Cerbos leverages protobuf and gRPC for defining all core features and interfaces.
GitHub’s inconsistent access control
GitHub’s repository settings page suffers from a frustrating anti-pattern where policies are not enforced consistently - there’s a better way to keep access control rules consistent between layers and decouple policies from code.
Filtering data using authorization logic
With the latest release of Cerbos, we introduced a new experimental query planner API to help address this problem efficiently in a language-agnostic way. This article describes how we designed and developed that API.
Keeping documentation in sync with source code
In this article, Cerbos engineer Oğuzhan Durgun (@oguzhand95) describes how Cerbos configuration documentation is automatically kept in sync with the Go source code.Cerbos is a highly customizable appli...