Guide
All articles tagged Guide.
Express authorization: Scalable authorization for applications
Cerbosā authorization layer gives you fine-grained access control over your Express applications. Read the full guide here to learn more.
Revolutionizing authorization in Laravel applications
We just released the Cerbos Laravel SDK ā a seamless way to integrate Cerbos into your Laravel applications. To show its potential, we also built a demo project. This piece walks you through both of these, showing you how to simply use Cerbos to solve your authZ challenges.
FastAPI authorization: Get fine-grained access control
With Cerbosā authorization layer, you can easily implement centralized management of access control policies in your FastAPI application. Read our guide.
From HTTP to gRPC: Trials, tribulations and triumphs of porting our Python SDK
Weāve built a number of SDKs to streamline communication with the PDPs. Up until recently, the Python SDK was the only one which still used the HTTP API. This post describes the trials and tribulations that Sam Lock undertook in order to port it across to the wonders of gRPC.
Unlocking efficient authZ with Cerbosā Query Plan
While Cerbos APIs can manage batch requests, filtering a vast number of records becomes inefficient. This is especially true if extracting a large dataset from the source results in discarding most of the data post-filtering. This piece showcases the solution for such a challenge - Cerbos' Query Plan
Sidecar solutions: Enhancing microservices without the overhead
Alex Olivier delves into microservices, offering insights on implementing sidecar containers, balancing resources, and learning from industry success stories.
Mongoose adapter for Cerbos Query Plans
Implement authorization based filtering using Mongoose and Cerbos Query Plans
Okta authorization: How to improve security & scalability
Integrating Okta and Cerbos for authorization can produce various benefits especially when it comes to access and identity management. Read our full guide.
Nuxt authorization guide
When you integrate Cerbosā authorization layer with Nuxt.js you can provide the resulting applications with tighter security. Read our full guide here
The Importance of Data Security for Startups
The importance of data security for startups; adopting strategies like "zero trust" and robust authorization is vital.
REST vs. gRPC
Explore the two leading ways for building APIs: REST and gRPC, and what use case each one is best for.
Lenient scope search in Cerbos policies
This piece talks about one of the newest Cerbos features, introduced in v0.29. Lenient Scope Search means that if a policy with passed scope does not exist in the store, Cerbos will attempt to find a partial match by searching the policy within scopes that are part of the same hierarchy as the passed scope.
Flexible policy composition - Injecting environment specific information into Cerbos policies
The guide on one of Cerbos' newest features - introduced in v0.29. In this piece you'll learn how to use the new globals field in order to define a single set of access control policies for multiple environments.
Flexible policy composition - Local & export variables in Cerbos policies
The guide on one of Cerbos' newest features - introduced in v0.29. In this piece we'll explore how to leverage exportVariables feature and compare it with the old approach of using local variables within policies.
Leveraging SAML SSO with Cerbos and BoxyHQ: Elevating enterprise authorization
In a recent step-by-step tutorial, Senior Developer at BoxyHQ, Kiran K, walked through the process of integrating BoxyHQ's open source Enterprise SSO solution, SAML Jackson, with Cerbos to enable SAML SSO-based (Single Sign-On) enterprise authentication and authorization, with Okta as the Identity Provider (IdP).
Authorization remains #1 issue - OWASP 2023 Top 10 List
The top issue of the 2023 edition of the OWASP Top 10 is, yet again, authorization. In this blog post we explore the importance of authZ and approaches to mitigating access control vulnerabilities.
Unlocking cybersecurity: A deep dive into authentication vs authorization in software development
In a piece for TechBullion, Emre Baran explores the significance of authentication and authorization in software development. The piece delves into the methodologies of these cybersecurity measures, highlighting their relevance in ensuring the protection of systems and data. Baran underscores the necessity of understanding these aspects to develop a resilient, user-friendly, and threat-resistant digital environment.
The power of secure code in protecting digital environments
In a Forbes article by Adrian Bridgwater, Cerbos' Product Lead, Alex Olivier, underscores the often-overlooked importance of secure coding. Olivier advocates for prioritizing code integrity and outlines five key pillars of secure code to safeguard software and protect organizational reputation.