How Open ID Connect Works

1

WorkOS

#Developer Tools #APIs #Identity And Access Management 9 social mentions

2

Warrant

The specific challenge with authz in the app layer is that different apps can have different access models with varying complexity, especially the more granular you get (e.g. Implementing fine grained access to specific objects/resources - like Google Docs). Personally, I think a rebac (relationship/graph based) approach works best for apps because permissions in applications are mostly relational and/or hierarchical (levels of groups). There are authz systems out there such as Warrant <a href="https://warrant.dev/">https://warrant.dev/</a> (I'm a founder) in which you can define a custom access model as a schema and enforce it in your app.

#APIs #SaaS #Software Engineering 21 social mentions