golangman

4 ms·

1. 1.▲
   by golangman 10y ago

   It's probably just a typo, but OAuth(2) is exactly NOT an authentication protocol: https://oauth.net/articles/authentication/
2. 2.▲
   by golangman 10y ago

   Why do those policies make it there in the first place? Could you share some scenarios? I'd love to improve the managibility of policies :) The hydra ( http://github.com/ory/hydra ) project for example has groups
3. 3.▲
   by golangman 10y ago

   I have been there many many times. This is the reason for writing that library, because there are no good solutions that cover 99% of your cases. RBAC is limited, ACL is a managing nightmare, DAC is also limited, and so on. What really hit
4. 4.▲
   by golangman 10y ago

   Sorry, but if you had read the README you would probably have noticed that it does not matter if you use Google Auth, LDAP, MySQL or anything else. Subjects are just string identifiers, so it works per definition with everything, including
5. 5.▲
   Show HN: A Go Library for Better Access Control(github.com)

   158 points by golangman 10y ago|25 comments