AuthZ: Carta’s highly scalable permissions system

• Ory Keto

  35 4,610 8.5 Go

  Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.

  

I was surprised not to see a comparable evaluation to Ory Keto at all in this article. Ory Keto continued to evolve out of the shortcomings of OPA https://github.com/ory/keto/issues/47 .

It's also based on Zanzibar, and it's used in production applications today. Cloud version coming soon (using cockroachdb) or use the open source version (postgres).

• access-controller

  5 71 1.8 Go

  A highly scalable open-source implementation of an access-control engine inspired by Google Zanzibar-"Google’s Consistent, Global Authorization System"

  

I've been working on a scalable open-source version of Google Zanzibar called the Authorizer platform. The implementation varies from that of Authzed by horizontally scaling the query space across more than one node. It uses consistent hashing with bounded loads to assign a specific node to serve the queries for the objects that it's responsible for. It also supports the namespace rewrite specification of the paper and the continuous namespace config monitoring. Much more progress is coming as well!

Take a look, I'd love feedback and to build it into something generally very valuable for the community!

https://github.com/authorizer-tech/access-controller

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project