topaz
ASP.NET Identity
topaz | ASP.NET Identity | |
---|---|---|
9 | 2 | |
982 | 1,915 | |
2.6% | - | |
9.5 | 0.0 | |
1 day ago | over 5 years ago | |
Go | C# | |
Apache License 2.0 | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
topaz
-
Open Policy Agent
OPA is a great tool for implementing a policy-as-code system. But if you're trying to use it for application authorization (e.g. fine-grained authz for B2B SaaS or a set of internal applications), you may find that its policy story is strong, but it doesn't really have a "data plane": you either store data in a data.json file and rebuild the policy any time that data changes, or make an http.send call out of the policy to fetch dynamic data.
Check out Topaz [0], which uses OPA as its decision engine, but adds a data plane that is based on the ReBAC ideas explored in the Google Zanzibar [1] paper.
Disclaimer: I work on the team [2] that builds and maintains the Topaz project.
[0] https://www.topaz.sh
[1] https://research.google/pubs/zanzibar-googles-consistent-glo...
[2] https://www.aserto.com
-
Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar
You can, simply use the topazd.exe binary from the topaz_windows_x86_64.zip from the GH releases page (https://github.com/aserto-dev/topaz/releases). Note this is currently not a Windows Service, so not net start topaz. Let me know if that would be interesting.
-
OPA (Open Policy Agent) VS topaz - a user suggested alternative
2 projects | 25 Jul 2023
Topaz is an open-source authorization project for cloud-native applications. It uses OPA as the decision engine and supports Rego policy as first-class citizens. It also has an embedded relationship database to support data-centric authorization models like Google Zanzibar's relationship-based access controls (ReBAC).
- Topaz
- Show HN: Topaz: open-source authorization combining the best of OPA and Zanzibar
ASP.NET Identity
-
2FA logins with "magic link" style passwordless authentication?
There's nothing wrong with directly getting the user in their flow, the GetTwoFactorAuthenticationUserAsync is just the method that uses a tfa cookie to flow the information in the templates. The obvious caveat is that you would need to be careful to not make it easy to bypass the first/password step, but there's not a lot of ceremony underneath the covers: https://github.com/aspnet/Identity/blob/master/src/Identity/SignInManager.cs#L526
-
What every ASP.NET Core Web API project needs - Part 3 - Exception handling middleware
If you wrap the result into another object like IdentityResult, you should pay the extra heap allocation. For each call, an extra object should be initialized even for the successful operation. If you call an API 100 times with different inputs, how many times an exception may be thrown? So the rate of throwing an exception with the extra object initializing (and heap allocation) is not the same
What are some alternatives?
openfga - A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
DotNetOpenAuth
permify - Open source authorization service inspired by Google Zanzibar to build fine-grained and scalable authorization systems.
OAuth
DSP-Shared_Collection
Cierge
spicedb - Open Source, Google Zanzibar-inspired permissions database to enable fine-grained access control for customer applications
ASP.NET SAML - Very simple SAML 2.0 consumer module for ASP.NET/C#
IAmRoot NuGet Package - 📦🏴☠️ NuGet package that shows we can run arbitrary code from any NuGet package
PwdLess
granite-orm - ORM Model with Adapters for mysql, pg, sqlite in the Crystal Language.
TwoFactorAuth.Net - .Net library for Two Factor Authentication (TFA / 2FA)