Authorization as a Service (feat. Jake Moshenko)
Software Development, Finance and AI14 Maalis 2024

Authorization as a Service (feat. Jake Moshenko)

Jake Moshenko⁠, CEO of ⁠AuthZed⁠, discusses the importance of permissioning databases and the challenges of implementing permissions at scale. He explains how AuthZed solves this problem by providing a common API for flexible and fine-grained authorization. The target market for AuthZed includes companies of all sizes that need to add complex permission workflows to their applications. Jake demonstrates how AuthZed can be integrated with backend systems, web applications, and mobile apps. He also explains the benefits of using AuthZed, such as increased security and improved product velocity. The conversation concludes with a discussion on the AuthZed schema language and how permissions and roles are defined in the system. Jake Moshenko introduces the concept of permissions and relations in the context of access control. He explains how permissions can be granted to users for specific actions on resources, and how relationships between users and objects are defined. Jake also discusses the flexibility of defining roles and the granularity of permissions. He demonstrates how permissions can be visualized and edited in a user interface, and highlights the benefits of using a startup solution for access control. The conversation concludes with a discussion on the importance of leveraging existing tools and trusting innovative startups.

Takeaways

  • Permissions can be granted to users for specific actions on resources, such as read, write, and admin privileges.
  • Relations define the relationships between users and objects, allowing users to be readers, writers, or admins of a particular object.
  • Roles can be used to group multiple privileges or permissions together, providing a higher level of access.
  • Design time actions involve configuring the access control system, while runtime actions involve making API calls to enforce permissions.
  • When considering building or buying a solution, it is important to focus on core competencies and leverage existing tools and services.

Chapters

00:00 Introduction and Background

01:04 The Problem of Permissions at Scale

05:25 Implementing Authorization for Different Client Types

06:46 Integration with Backend and Web Applications

10:24 Implementing Permissioning for Mobile Apps

14:25 Benefits of Using AuthZed for Permissioning

22:00 Granting Access to Resources with AuthZed API

25:11 Defining Permissions and Roles in AuthZed

30:42 Introduction to Permissions and Relations

31:11 Understanding Permissions and Roles

32:20 Decoupling Relationships and Actions

33:36 Granularity of Permissions

34:14 Grouping Privileges into Roles

36:01 Design Time and Runtime Actions

36:46 Visualizing and Editing Permissions

39:33 Trusting a Startup

53:36 Building vs. Buying Solutions

58:36 The Value of Innovation and Trust

Jaksot(412)

API Gateway (Part 2/12): Publishing Snowpal API (Postman Workspace, Readme Documentation)

API Gateway (Part 2/12): Publishing Snowpal API (Postman Workspace, Readme Documentation)

(Part 2/12): Setting up Readme documentation, and creating manageable Postman workspaces. At Snowpal, we are close enough to launching our first API so other technology businesses can consume it, thereby focusing more on their core business problems and delivering quicker.   In this API Gateway series, I'll be sharing a lot of those details. If you have an interest in doing something similar, I hope it benefits you. #snowpal #projectmanagement Manage personal and professional projects on https://snowpal.com.

18 Tammi 20239min

API Gateway (Part 1/12): Publishing Snowpal API (for other businesses to consume)

API Gateway (Part 1/12): Publishing Snowpal API (for other businesses to consume)

(Part 1/12): You may have heard about API-First strategies. What does it mean to build your APIs first? What is an API Gateway?  At Snowpal, we are close enough to launching our first API so other technology businesses can consume it, thereby focusing more on their core business problems and delivering quicker.   In this API Gateway series, I'll be sharing a lot of those details. If you have an interest in doing something similar, I hope it benefits you. #snowpal #projectmanagement Manage personal and professional projects on https://snowpal.com.

17 Tammi 20236min

Thinking about purchasing an UI Template for a quick turnaround? Think again!

Thinking about purchasing an UI Template for a quick turnaround? Think again!

There's no dearth of UI templates and a lot of them certainly look promising but is the reality a bit different? #snowpal #projectmanagement Manage personal and professional projects on https://snowpal.com.

31 Joulu 20229min

Does your SDLC include this very critical step?

Does your SDLC include this very critical step?

You were given some Business Requirements. You understood them, converted them to Technical Requirements, designed it nicely, implemented it beautifully and tested it phenomenally well. At this point, you think you are ready to deploy those changes to Production. Sure about that? #snowpal #projectmanagement Manage personal and professional projects on https://snowpal.com.

30 Joulu 20224min

API Specification: Do Postman Collections with nested directories carry over seamlessly to OpenAPI?

API Specification: Do Postman Collections with nested directories carry over seamlessly to OpenAPI?

Well, we've seen that they do not. We created nested directories in our Postman Collections only to notice that they didn't convert gracefully to OpenAPI when transformed. #snowpal #projectmanagement Manage personal and professional projects on https://snowpal.com.

30 Joulu 20224min

OAuth 2.0 Implementation to support Apple, Microsoft, Facebook and Google

OAuth 2.0 Implementation to support Apple, Microsoft, Facebook and Google

We recently implemented Microsoft Sign In, and had added support for Google Sign In a few weeks earlier. And we've had support for Facebook and Apple Sign In from Day 1. They all support OAuth 2.0 yet we've had to deal with some nuances. #snowpal #projectmanagement Manage personal and professional projects on https://snowpal.com.

30 Joulu 20228min

Cool User Interface vs Stable User Interface: Are they NOT mutually exclusive items?

Cool User Interface vs Stable User Interface: Are they NOT mutually exclusive items?

It's nice to have a cool UI. Sure, who likes dated stuff! But, it is important that by making your UI cooler, you don't end up making it unstable. And if you are wondering why they have anything to do with each other, listen in! #snowpal #projectmanagement Manage personal and professional projects on https://snowpal.com.

30 Joulu 20229min

Transforming REST Endpoints defined in YAML files to Postman Workspace

Transforming REST Endpoints defined in YAML files to Postman Workspace

We had a need to dynamically create Postman Workspaces (collections and endpoints) as part of the API Gateway Product we are currently working on. So, we wrote a script to convert endpoints defined in YAML files to Postman workspaces. #snowpal #projectmanagement Manage personal and professional projects on https://snowpal.com.

30 Joulu 20229min