topaz
OAuth
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
topaz
-
Open Policy Agent
OPA is a great tool for implementing a policy-as-code system. But if you're trying to use it for application authorization (e.g. fine-grained authz for B2B SaaS or a set of internal applications), you may find that its policy story is strong, but it doesn't really have a "data plane": you either store data in a data.json file and rebuild the policy any time that data changes, or make an http.send call out of the policy to fetch dynamic data.
Check out Topaz [0], which uses OPA as its decision engine, but adds a data plane that is based on the ReBAC ideas explored in the Google Zanzibar [1] paper.
Disclaimer: I work on the team [2] that builds and maintains the Topaz project.
[0] https://www.topaz.sh
[1] https://research.google/pubs/zanzibar-googles-consistent-glo...
[2] https://www.aserto.com
-
Show HN: Topaz 0.30 – OSS authz service combining the best of OPA and Zanzibar
You can, simply use the topazd.exe binary from the topaz_windows_x86_64.zip from the GH releases page (https://github.com/aserto-dev/topaz/releases). Note this is currently not a Windows Service, so not net start topaz. Let me know if that would be interesting.
-
OPA (Open Policy Agent) VS topaz - a user suggested alternative
2 projects | 25 Jul 2023
Topaz is an open-source authorization project for cloud-native applications. It uses OPA as the decision engine and supports Rego policy as first-class citizens. It also has an embedded relationship database to support data-centric authorization models like Google Zanzibar's relationship-based access controls (ReBAC).
- Topaz
- Show HN: Topaz: open-source authorization combining the best of OPA and Zanzibar
OAuth
We haven't tracked posts mentioning OAuth yet.
Tracking mentions began in Dec 2020.
What are some alternatives?
openfga - A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
ASP.NET Identity
permify - Open source authorization service inspired by Google Zanzibar to build fine-grained and scalable authorization systems.
DotNetOpenAuth
DSP-Shared_Collection
TwoFactorAuth.Net - .Net library for Two Factor Authentication (TFA / 2FA)
spicedb - Open Source, Google Zanzibar-inspired permissions database to enable fine-grained access control for customer applications
Stuntman - Library for impersonating users during development leveraging ASP.NET Identity.
Logibit Hawk - A F# Hawk implementation with a strongly typed API that guides your usage and minimises security programming errors.
IAmRoot NuGet Package - 📦🏴☠️ NuGet package that shows we can run arbitrary code from any NuGet package
ASP.NET SAML - Very simple SAML 2.0 consumer module for ASP.NET/C#