News for hackers. Stuff that matters.

A comment on Ory Keto, open source authorization server based on Google Zanzibar. Parent comment

Re:Ory Keto, open source authorization server based on Googl... by neupatr on Thursday April 08, 2021 @10:49AM (#26739407)
Keto only does authorization, independent of users, devices, bots, applications, ... Basically you store your ACLs there and then ask "is _subject_ allowed to do _relation_ on _object_". All the variables are whatever you define them to be.

Check out https://github.com/ory/kratos, our identity server. Or https://github.com/ory/hydra, our OAuth2 server. All of them together can be assembled to have something like Keycloak.

[ Parent | on HN ]
Re:Ory Keto, open source authorization server based on Googl... by candiddevmike on Thursday April 08, 2021 @12:03PM (#26740435)
Kratos can manage users and groups right? Looks like it requires a database backend today. I have been noodling what a distributed AAA service like kratos might look like--any plans to leverage etcd instead?

What about managing auth for (Linux) servers? PAM, sudo, etc?

[ Parent | on HN ]
Re:Ory Keto, open source authorization server based on Googl... by CGamesPlay on Thursday April 08, 2021 @07:10PM (#26744912)
Do any of the ORY products provide a UI? From what I've seen of Kratos, you have to completely implement all HTML output yourself. Is that accurate? Is there some drop-in UI in the ORY ecosystem?
[ Parent | on HN ]
Re:Ory Keto, open source authorization server based on Googl... by neupatr on Friday April 09, 2021 @09:52AM (#26750582)
Exactly, all of our products come without any UI whatsoever. There are example UIs that could be improved, but they can get you started easily. Something like stripe's hosted pages is on our list, just not had the time to implement it yet.
[ Parent | on HN ]