Guide
All articles tagged Guide.
The Importance of Data Security for Startups
The importance of data security for startups; adopting strategies like "zero trust" and robust authorization is vital.
REST vs. gRPC
Explore the two leading ways for building APIs: REST and gRPC, and what use case each one is best for.
Lenient scope search in Cerbos policies
This piece talks about one of the newest Cerbos features, introduced in v0.29. Lenient Scope Search means that if a policy with passed scope does not exist in the store, Cerbos will attempt to find a partial match by searching the policy within scopes that are part of the same hierarchy as the passed scope.
Flexible policy composition - Injecting environment specific information into Cerbos policies
The guide on one of Cerbos' newest features - introduced in v0.29. In this piece you'll learn how to use the new globals field in order to define a single set of access control policies for multiple environments.
Flexible policy composition - Local & export variables in Cerbos policies
The guide on one of Cerbos' newest features - introduced in v0.29. In this piece we'll explore how to leverage exportVariables feature and compare it with the old approach of using local variables within policies.
Leveraging SAML SSO with Cerbos and BoxyHQ: Elevating enterprise authorization
In a recent step-by-step tutorial, Senior Developer at BoxyHQ, Kiran K, walked through the process of integrating BoxyHQ's open source Enterprise SSO solution, SAML Jackson, with Cerbos to enable SAML SSO-based (Single Sign-On) enterprise authentication and authorization, with Okta as the Identity Provider (IdP).
Authorization remains #1 issue - OWASP 2023 Top 10 List
The top issue of the 2023 edition of the OWASP Top 10 is, yet again, authorization. In this blog post we explore the importance of authZ and approaches to mitigating access control vulnerabilities.
Unlocking cybersecurity: A deep dive into authentication vs authorization in software development
In a piece for TechBullion, Emre Baran explores the significance of authentication and authorization in software development. The piece delves into the methodologies of these cybersecurity measures, highlighting their relevance in ensuring the protection of systems and data. Baran underscores the necessity of understanding these aspects to develop a resilient, user-friendly, and threat-resistant digital environment.
The power of secure code in protecting digital environments
In a Forbes article by Adrian Bridgwater, Cerbos' Product Lead, Alex Olivier, underscores the often-overlooked importance of secure coding. Olivier advocates for prioritizing code integrity and outlines five key pillars of secure code to safeguard software and protect organizational reputation.
Securing your business's digital frontier: A comprehensive guide to identity and access management
This piece by Alex Olivier for HackerNoon, delves deep into the world of Identity and Access Management (IAM), outlining its pivotal role in fortifying business cybersecurity, enhancing operational efficiency, and ensuring regulatory compliance.
Decoupled authorization: Navigating technical challenges and best practices
Emre Baran examines decoupled authorization for secure software development, and goes over points that should be considered prior to implementing decoupled authorization.
Taking the pain out of authorization and user permissions
Cerbos separates authorization logic from the application code, boosting scalability, security, and adaptability. This separation makes updating authorization straightforward, enabling swift and secure adjustments to meet ever-changing business needs.
How to use Cerbos effectively
We are committed to making Cerbos a delightful piece of software to use, and, in this article, we aim to showcase all the (free!) developer productivity tools and features that we have built to achieve that goal.
Why audit logs are important
Audit logs capture information about key events that occur within software systems, and create a historical record. Administrators and compliance teams can use them to investigate user actions, spot suspect activity, and adhere to regulatory frameworks.
How decoupling can help you write better software
In this article, we look at the basics of decoupling, how decoupling can help you write better software and what to look for when identifying components for decoupling.
How to secure your Remix app routes with Cerbos?
In this tutorial, we will show you how to secure your Remix app routes with Cerbos. Cerbos is an open-source policy engine for authorizing access to resources. We gonna walk you through the steps of applying authorization in your Remix app with Cerbos. We will also show you how to use Cerbos to secure your routes and APIs.
Should you choose gRPC over REST when designing your APIs?
If you head up a development team, then choosing which architectural style to use is a critical decision to make when building up an IT infrastructure. APIs remain an important part of this decision making process; they are mediators through which information is sourced and transferred.
Accessing Protected Resources in Next.js with Prisma
Combine the power of Next.js and Prisma to build fast, secure, and dynamic web applications by integrating Cerbos, the open-source authorization layer