Show HN: Topaz: open-source authorization combining the best of OPA and Zanzibar

Re:Show HN: Topaz: open-source authorization combining the b... by bradhe on Monday October 24, 2022 @11:39AM (#33318138)

Ah, super cool to see an implementation of Zanzibar out in the wild. The paper looked really interesting when it bubbled up on HN a while back.

Wonder if there are planned integrations with any stacks? For instance, would be super cool to see how this could plug into Rails/ActiveRecord for a kind of out-of-the-box authorization experience.

[ Parent | on HN ]

Re:Show HN: Topaz: open-source authorization combining the b... by ogazitt on Monday October 24, 2022 @11:47AM (#33318259)

Thanks! We do have Rack middleware [1], as well as a Rails integration [2]. Let us know what you think!

[1] https://www.topaz.sh/docs/software-development-kits/ruby/mid...

[2] https://www.topaz.sh/docs/software-development-kits/ruby/rai...

[ Parent | on HN ]

Re:Show HN: Topaz: open-source authorization combining the b... by robertlagrant on Monday October 24, 2022 @12:35PM (#33318930)

Ory [0] is also an OSS Zanzibar implementation.

[0] https://ory.sh

[ Parent | on HN ]

Re:Show HN: Topaz: open-source authorization combining the b... by rhamzeh on Monday October 24, 2022 @12:50PM (#33319135)

Love the growing number of OSS Zanzibar implementations, and congrats to the Aserto team for launching Topaz!

Ory Keto's intro video @ SV IAM User Group [0] is worth a watch.

Other OSS Zanzibar implementations:

- https://github.com/authzed/spicedb

- https://github.com/Permify/permify

- https://github.com/openfga/openfga

[0]: https://www.youtube.com/watch?v=3vtTFLB_jDo

[Disclaimer: On the OpenFGA team]

[ Parent | on HN ]

Re:Show HN: Topaz: open-source authorization combining the b... by rschwabco on Monday October 24, 2022 @01:03PM (#33319294)

That's cool! What's neat about Topaz is that it combines the Zanzibar approach and the policy-as-code approach. That allows you to use the ReBAC, ABAC and RBAC authz patterns interchangeably.

[ Parent | on HN ]

Re:Show HN: Topaz: open-source authorization combining the b... by Aeolun on Monday October 24, 2022 @06:50PM (#33323687)

Trying to set up Ory was really hard though.

It’s like all these ostensibly OS libraries deliberately make it hard to set up to drive you to their paid offering.

[ Parent | on HN ]

Re:Show HN: Topaz: open-source authorization combining the b... by ogazitt on Monday October 24, 2022 @07:10PM (#33323856)

Would love any feedback you have on setting up Topaz, if you choose to give it a try! We built it to be useful completely standalone.

[ Parent | on HN ]