Guide
All articles tagged Guide.

Itâs Time to Ensure Your Security Is as Scalable as Your Business
Discover how stateless authorization enhances security, scalability, and flexibility in software development. Learn why industry leaders like NTWRK and Loop are embracing this approach to improve application performance, reduce latency, and simplify policy updates. Ensure your software's security is as scalable as your business.

Badly Designed Authorization is Technical Debt
Optimize authorization in software engineering by decoupling business logic from code. Avoid hard-coded access controls that lead to technical debt. Centralize authorization decisions with tools like Cerbos, allowing for flexible, scalable, and secure policy management, independent of the application codebase.

401 vs 403 Error Codes: What's the Difference?
Error codes 401 and 403 are related to each other, and because of that, sometimes they tend to be mixed up together. In this article, we're going to review what each of these error codes meanâand what you can do to solve them.

How to implement authorization in a Gorilla application
In this post, we discuss implementing authorization in a Gorilla application & provide a step-by-step guide for doing so using Cerbos. Read more here.

Cerbos Hub - July Product Updates
Cerbos Hub July updates: GA launch, selective policy compilation for embedded PDP, detailed build error feedback, new Playground templates, and user profile management. Enhance your authorization systems with self-contained policy bundles and streamline policy creation. Learn more about these updates in our latest blog post.

Navigating authentication and authorization: Harnessing the power of Microsoft Entra External ID and Cerbos for enhanced application security
Discover how to integrate Microsoft Entra External ID with Cerbos for robust web application security. This guide covers setup, user flows, permissions, and fine-grained authorization to enhance authentication and authorization practices, essential for developers aiming to build secure and scalable applications. Read our detailed tutorial now.

How to use Cerbos in Docker Compose (PDP + Hub)
In this blog, you will learn what Cerbos is, how Cerbos works and its main components. The blog will take you through a hands-on demonstration that will ensure you get an accelerated understanding of how to use Cerbos in a Docker environment as well as within the provided Hub.

Using Cerbos with Keycloak for Identity/AuthN
In this tutorial, we'll use Keycloak for authentication and then implement Cerbos for fine-grained access control, all within a Django web application, though the same principle will work for any application. As a result we will ensure that only authenticated users can access certain parts of the application, and their actions are authorized with precision.

What's so bad about sidecars, anyway?
Explore the benefits and limitations of using the sidecar design pattern and the specific use cases where it is most appropriate. Learn how to determine whether a sidecar is a suitable choice for a particular scenario, as well as how to implement sidecars to maximize their benefits.

Importance of authorization in transition from monolithic to microservices architecture
Explore how Cerbos enhances security in microservices architectures, transitioning from monolithic systems. This article discusses the necessity of robust, scalable authorization in distributed environments, emphasizing zero-trust principles and Cerbos's flexible, developer-friendly access control solutions.

Implementing Cerbos in a Spring Boot Application
In this tutorial, youâll learn about authorization, how it works, and how to use Cerbos to integrate authorization into a Spring Boot application.

A complete guide to Next.js authorization
In this tutorial, weâll learn about authorization, how it works, and how to integrate it into a Next.js application using Cerbos, an open-source authorization project. This approach will allow us to seamlessly manage and enforce access controls within our web application.

Building secure applications: Key insights on authentication and authorization from Cerbos and Microsoft Entra
Enhance software security through advanced authentication and authorization, explore the synergy between Microsoft Entra External ID and Cerbos. Learn the significance of choosing the right security approach, and discover how integrating these solutions empowers SaaS applications with robust, scalable security measures. A must-read for developers prioritizing data protection and compliance.

Modern software development in banking
Discover cutting-edge strategies for modernizing financial services software development. This blog post unveils insights from industry leaders on embracing DevSecOps, feature flags, authorization, and open source to overcome traditional banking challenges, driving innovation and efficiency in financial technology.

What is an authorization API?
An authorization API lets you implement access control policies and authorization independent of your core solution. It also forms a part of bigger trends towards centralized authorization strategies and zero trust models to prevent security incidents.

What is policy-based access control (PBAC)?
If youâve ever asked yourself: what is Policy-Based Access Control (PBAC) and wondered if your company should adopt it, read this brief explanatory guide.

Coarse grained vs fine grained access control
One is easy to implement, the other is complex but provides precise control. Read this post for a comparison of coarse grained & fine grained access control.

How to Implement RBAC authorization in Nest.JS
Understanding the most common methods of integrating Cerbos authorization within NestJS.