top | item 26822416

Show HN: Authorization Academy – guides for building application authorization

15 points| samjs | 4 years ago |osohq.com

3 comments

order
[+] samjs|4 years ago|reply
Hi HN! I'm one of the founders of Oso, an open source library for authorization (someone posted us here a little while ago: https://news.ycombinator.com/item?id=25440741).

Over time, we've gotten a lot of questions from developers on authorization basics – like how to model roles, where to add authorization checks, or how to integrate permissions in the UI.

It turns out that there's not much information available on these topics that's technical, concrete and user-friendly. So, we started writing a series of guides on these topics to capture everything we've learnt, heard, and experienced ourselves.

The series is called Authorization Academy (https://www.osohq.com/developers/authorization-academy). The first few chapters cover architecture and modeling roles. Next we'll cover relationship-based access control, enforcement, and integrating permissions data into UIs. We have a lot of topics we'd like to write about, and they take a fair bit of time, but let us know if there's anything in particular you'd like to read about!

The guides cover authorization generically and are not specific to Oso, so they should be useful for anyone who is building authorization into their app or otherwise wants to learn about the area. Of course, if you'd like to learn more about Oso you can visit our site (https://www.osohq.com) or come talk with us in Slack (https://join-slack.osohq.com).

[+] stonecharioteer|4 years ago|reply
Hey Sam! I've said this over slack and I am saying this again. Oso is truly one of the most beautiful libraries that I have seen. It is well written, has so much more potential than you can gauge at first glance, and is a sheer joy to work with once it clicks. Your docs are also improving constantly. Keep up the good work. I am so tempted to apply for a job!

I still owe you a blog article that has been in my drafts for quite some time (since Jan), but I'll get to it this week.

Thank you for the great product. I wish you all the success you can find.