Guide
All articles tagged Guide.
How to address decentralized data management in microservices
Learn how decentralized data management is crucial in microservices for maintaining consistency and integrity across services.
Granular permission control - do organizations need it?
Granular permission control empowers organizations to manage access with precision, reducing security risks and ensuring compliance. By defining who can access what, and under which conditions, companies safeguard sensitive data and streamline operations. Learn why granular permissions are essential for robust security and effective role management.
Determining service boundaries and decomposing your monolith
The first major hurdle when decomposing a monolith app is defining appropriate boundaries for each microservice. We’ll cover how to break down a monolithic app into smaller, independently deployable services that align with business capabilities.
Why granular, scalable control is a must for every CTO
Fine-grained authorization and access control in modern applications - learn how to transition from basic RBAC to ABAC using externalized authorization. Discover best practices for implementing scalable permission systems in microservices architectures, ensuring compliance, and managing technical debt through policy-driven security approaches.
Easy way to put user role in JWT
Learn about embedding user roles in JWTs for managing access control in your applications. Use the technique described in this article with care. If you end up abusing this method, you'll fall into the bloated JWT anti-pattern.
Using Cerbos authorization with JSON Web Tokens
Learn how to implement Cerbos authorization in JWT, in a JavaScript application using Next.js. This guide demonstrates combining JSON Web Tokens for secure authentication and Cerbos' policy-based engine for robust authorization, enabling simple access control management for your APIs.
Why you need to think about both your security and users when implementing authorization
Explore how a finely-tuned authorization system balances security and user experience, ensuring compliance with global regulations like GDPR and CCPA. Learn strategies to design scalable, user-friendly permissions that align with business goals, enhance customer trust, and meet enterprise needs without compromising cybersecurity.
How to implement authorization in React JS
In this blog, we will learn how to implement an authorization mechanism in ReactJS applications using Cerbos.
PBAC vs. Zanzibar: Finding The Right Fit For Your Application
Discover the key differences between PBAC and Zanzibar to find the ideal authorization solution for your application. Learn how PBAC with Cerbos offers a flexible, scalable access control solution, while Zanzibar excels in centralized, fine-grained management for static resources. Find the right fit for your needs.
It’s Time to Ensure Your Security Is as Scalable as Your Business
Discover how stateless authorization enhances security, scalability, and flexibility in software development. Learn why industry leaders like NTWRK and Loop are embracing this approach to improve application performance, reduce latency, and simplify policy updates. Ensure your software's security is as scalable as your business.
Badly Designed Authorization is Technical Debt
Optimize authorization in software engineering by decoupling business logic from code. Avoid hard-coded access controls that lead to technical debt. Centralize authorization decisions with tools like Cerbos, allowing for flexible, scalable, and secure policy management, independent of the application codebase.
401 vs 403 Error Codes: What's the Difference?
Error codes 401 and 403 are related to each other, and because of that, sometimes they tend to be mixed up together. In this article, we're going to review what each of these error codes mean—and what you can do to solve them.
How to implement authorization in a Gorilla application
In this post, we discuss implementing authorization in a Gorilla application & provide a step-by-step guide for doing so using Cerbos. Read more here.
Cerbos Hub - July Product Updates
Cerbos Hub July updates: GA launch, selective policy compilation for embedded PDP, detailed build error feedback, new Playground templates, and user profile management. Enhance your authorization systems with self-contained policy bundles and streamline policy creation. Learn more about these updates in our latest blog post.
Navigating authentication and authorization: Harnessing the power of Microsoft Entra External ID and Cerbos for enhanced application security
Discover how to integrate Microsoft Entra External ID with Cerbos for robust web application security. This guide covers setup, user flows, permissions, and fine-grained authorization to enhance authentication and authorization practices, essential for developers aiming to build secure and scalable applications. Read our detailed tutorial now.
How to use Cerbos in Docker Compose (PDP + Hub)
In this blog, you will learn what Cerbos is, how Cerbos works and its main components. The blog will take you through a hands-on demonstration that will ensure you get an accelerated understanding of how to use Cerbos in a Docker environment as well as within the provided Hub.
Using Cerbos with Keycloak for Identity/AuthN
In this tutorial, we'll use Keycloak for authentication and then implement Cerbos for fine-grained access control, all within a Django web application, though the same principle will work for any application. As a result we will ensure that only authenticated users can access certain parts of the application, and their actions are authorized with precision.
What's so bad about sidecars, anyway?
Explore the benefits and limitations of using the sidecar design pattern and the specific use cases where it is most appropriate. Learn how to determine whether a sidecar is a suitable choice for a particular scenario, as well as how to implement sidecars to maximize their benefits.