Show HN: Cerbos. Open source, horizontally scalable, stateless authorization (github.com)
We started working on Cerbos[0] over 3 years ago. Permission management across applications is difficult, especially as the code base grows: you have hundreds of users, many services in different languages, and several environments. Hardcoded access control rules tangled with business logic make every new role and permission change a hassle to write, test, and maintain.
Cerbos PDP[1], is an open source, self-hosted, and a stateless solution to solve access rule consistency in a scalable manner across the entire code base. It truly scales horizontally and is used by hundreds of companies. Check out how Cerbos works[2].
Cerbos also has a playground[3] which lets you author policies and in real time see their impact in the application you are developing.
I would love to hear your feedback.
PS: We just surpassed 3333 stars!
[0] https://cerbos.dev [1] https://github.com/cerbos/cerbos [2] https://cerbos.dev/how-it-works [3] https://play.cerbos.dev
Disclaimer: I am the co-founder of Cerbos.
4 comments
[ 2.7 ms ] story [ 20.6 ms ] threadYes, Cerbos supports both RBAC and ABAC.
You can try out a pre-built rbac / abac policy in the Cerbos playground by going here https://www.cerbos.dev/features-benefits-and-use-cases/rbac and clicking [Try out this pre-built policy in the Cerbos Playground]
Can it deployed embedded within, say, a node app, or does it require deployment as its own docker image or docker compose stack?