News for hackers. Stuff that matters.

A comment on How Open ID Connect Works. Parent comment

Re:How Open ID Connect Works by mooreds on Thursday January 04, 2024 @04:48PM (#38872735)
> For AuthZ, things are not surprisingly outsourced heavily to the application side.

There's some newer startups working on extracting and centralizing AuthZ functionality. Ones I'm aware of:

* permit.io

* cerbos.dev

* Oso

I'm sure there are more.

[ Parent | on HN ]
Re:How Open ID Connect Works by taeric on Thursday January 04, 2024 @06:23PM (#38873675)
I think this hits the same points I brought up in https://news.ycombinator.com/item?id=38873614. I do not claim that these should never be used. In fact, I would go farther and say in many cases this sort of thing should be used.
[ Parent | on HN ]