News for hackers. Stuff that matters.
Re:Distributed Authorization by withinboredom on Tuesday April 16, 2024 @01:10PM (#40054549)
> And the shares are used to resolve authorization here [1], right?

That's correct!

> making it easier for multiple teams to collaborate on permissions (which we solve by having a declarative language), and solving the list filtering problem (as talked about in the post).

Those are pretty hard problems, so it's really cool to see someone solving it in a reusable way! For me, authz is always a chore ... making it something easy to specify in a way that "just works" is worth quite a bit in my mind!

> If you packaged that up as a standalone solution, I could see a lot of people getting value from it!

I don't really have much desire to get into maintaining an auth library; there's just not enough time in the day!

> a blog post on this shares approach would be super cool.

It's pending publish, actually! I've got a devlog (more like a book at this point) for something I've been working on for years now, but no posts are going to be published until I hit a milestone. I'm almost there... not much further.

Re:Distributed Authorization by samjs on Tuesday April 16, 2024 @01:23PM (#40054706)
> I don't really have much desire to get into maintaining an auth library; there's just not enough time in the day!

Haha, well in some ways I'm glad to hear that. That's why we exist :)

> It's pending publish, actually! I've got a devlog (more like a book at this point) for something I've been working on for years now, but no posts are going to be published until I hit a milestone. I'm almost there... not much further.

Send it over if you want another pair of eyes, and lmk when publishing so we can share with our community too. I'm sam [at] osohq.com