Guide
All articles tagged Guide.
Using Clerk with Cerbos
Clerk solves user management so developers can stop reinventing the wheel and focus on their core business - the same mission Cerbos has for authorization
Understanding Context-Aware Permissions
Context-aware permissions (CAP) promote anywhere-anytime access by making computers intelligent enough to sense and react to their environment. You can use CAP in your software to define who needs access to what information at what time, so that your users can access only the information and services they need based on their location, the time of day, or other context factors.
Using WorkOS SSO with Cerbos
Single Sign-On (SSO) is the most frequently occurring requirement for enterprise organisations looking to adopt new SaaS applications. WorkOS streamlines this process and can be integrated with Cerbos for context-aware access controls.
Filtering data using authorization logic
With the latest release of Cerbos, we introduced a new experimental query planner API to help address this problem efficiently in a language-agnostic way. This article describes how we designed and developed that API.
How To Incrementally Adopt New Authorization Systems
Implementing a whole new authorization system can be a daunting task because of the complexities involved - find out how to approach this in a sensible and considered way.
The Case Against Token-Based Authorization
The latest version of Cerbos has been released with the focus of providing a smart mechanism to pass authorization logicdown into your data storage layer, improvements to the cerbosctl, and a couple of enhancements to schema and test dataAuthorization aware data fetching...
Extending Okta with Cerbos for fine-grained access control
Okta has become one of the primary identity services for enterprise applications in recent years. Itās powerful user management, authentication mechanisms and roles/groups support make it an easy choice for organisations that are managing numerous services and s...
Homegrown security scales and works, if you have a full time dedicated team
Every software company has to make build-or-buy decisions for every part of their stack. Unless it is your core business, you donāt build a globally-distributed network of data centres: you use a Cloud provider like AWS, GCP or Azure. You donāt build authentication systems from scratch: you use a...
Passwordless Identity with Magic and Authorization with Cerbos
The demise of passwords has long been predicted due to the ongoing leaks, hacks and breaches in recent years. There has been a lot of innovation in this space and ...
Comparing User Permissions Strategies
Microservices architectures are the dominant force in todayās software engineering realm. This infrastructure approachādespite its multiple benefitsāhas created quite a tangled management web. IBM has corroborated this, sharing that applica...
Broken Access Control is the #1 issue in OWASP 2021 Top 10
The Open Web Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software. Many will be familiar with the OWASP Top 10 which is published every few years and is used as the standard for evaluating the security of web applications. The 2021 T...
The never-ending product requirements of user authorization
This article first appeared on alexolivier.meIāve been fortunate to work as a Product Manager across eCommerce, Marketing, Supply Chain, Fitness and Finance, and ...
The Case for Granular Permissions
Presenting the case for granular permissions to help you select the right authorization scheme to make authorization easier.
Changing Business Logic in an Evolving System
Have you ever had to change existing business logic that was hard to understand? Did it break unrelated parts of the system when it was changed? Perhaps it had really poor documentation.Some of the most difficult software projects Iāve worked on involved working with and main...
The Hidden Costs of User Authorization
Authentication and authorization are the two central pillars of security of any application. Authentication is the identification of valid users and authorization is the process of determining what those users are allowed to do. User authorization plays a crucial role in securing access to your a...