keto

Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models. (by ory)

Stats

Basic keto repo stats
13
915
0.0
6 days ago

ory/keto is an open source project licensed under Apache License 2.0 which is an OSI approved license.

Keto Alternatives

Similar projects and alternatives to keto
  • GitHub repo hydra

    OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Compatible with MITREid.

  • GitHub repo Keycloak

    Open Source Identity and Access Management For Modern Applications and Services

  • GitHub repo PostgreSQL

    Mirror of the official PostgreSQL GIT repository. Note that this is just a *mirror* - we don't work with pull requests on github. To contribute, please see https://wiki.postgresql.org/wiki/Submitting_a_Patch

  • GitHub repo kratos

    Next-gen identity server (think Auth0, Okta, Firebase) with Ory-hardened authentication, MFA, FIDO2, profile management, identity schemas, social sign in, registration, account recovery, service-to-service and IoT auth. Can work as an OAuth2 / OpenID Connect Provider. Golang, headless, API-only - without templating or theming headaches. (by ory)

  • GitHub repo cargo-crev

    A cryptographically verifiable code review system for the cargo (Rust) package manager.

  • GitHub repo cpufetch

    Simple yet fancy CPU architecture fetching tool

  • GitHub repo pear

    WebRTC Library for IoT/Embedded Device using C (by sepfy)

  • GitHub repo PixelArtSearch

    Pixel art search engine for opengameart

  • GitHub repo LadyLua

    Single executable(static), batteries included, Lua 5.1 interpreter.

NOTE: The number of mentions on this list indicates mentions on common posts. Hence, a higher number means a better keto alternative or higher similarity.

Posts

Posts where keto has been mentioned. We have used some of these posts to build our list of alternatives and similar projects - the last one was on 2021-04-08.
  • First open source implementation of the Google Zanzibar paper
    reddit.com/r/devops | 2021-04-09
    The previous version of Keto was based off of OPA. We discovered that it is not suitable for our needs and what we want to offer, because it can be very hard to meet certain performance goals (e.g. https://github.com/ory/keto/issues/104).
  • Show HN: Ory Keto, open source authorization server based on Google Zanzibar
    news.ycombinator.com | 2021-04-08
    I was auditing Keto recently, I came across this discussion:

    https://github.com/ory/keto/issues/47

    It's a impressive example of high functioning discourse: all the participants provide valuable insight, state concerns, elegantly summarize very complex issues, and show a lot of respect to each other; great gains are made as a result. It's worth reading in its entirety.

    news.ycombinator.com | 2021-04-08
    I went diving into the docs to find out how Keto implements Zanzibar's consistency guarantees, which for Zanzibar are provided mostly by Spanner, but it seems that Keto just does not[1]. This does not strike me as the kind of thing that can just be added after the project begins.

    https://github.com/ory/keto/blob/master/docs/docs/concepts/s...

    news.ycombinator.com | 2021-04-08
    OPA takes a whole different approach. They basically have a specific language and a corresponding interpreter. The previous version of Keto was based off of OPA. We discovered that it is not suitable for our needs and what we want to offer because it can be very hard to meet certain performance goals (e.g. https://github.com/ory/keto/issues/104)

    Taking this simple approach allows us to provide a global, low latency, and consistent authorization system.

    news.ycombinator.com | 2021-04-08
    This is tracked here: https://github.com/ory/keto/issues/319

    Basically the idea is to check the attributes before actually forwarding the request to Keto. That could be done through e.g. a OPA integration. This can scale much better IMO than just doing everything in OPA.

    news.ycombinator.com | 2021-04-08
  • First open source implementation of the Google Zanzibar
    dev.to | 2021-04-08
  • First open source implementation of Google Zanzibar
    reddit.com/r/golang | 2021-04-08
  • Hacker News top posts: Apr 8, 2021
    Show HN: Ory Keto, open source authorization server based on Google Zanzibar\ (0 comments)
  • Keto 0.6: open-source implementation of Google Zanzibar
    news.ycombinator.com | 2021-04-07