3 ms·
Author of the article here. This is a very common question we get. OAuth is great for when the permissions can be modelled as a set of roles/scopes which apply
by alex-olivier 5y ago
Author of the article here.
This is a very common question we get. OAuth is great for when the permissions can be modelled as a set of roles/scopes which apply uniformity. Where that breaks down as described in the article is when there needs to be more context involved in the authoriZation - beyond simple roles from your chosen autheNtication provider.
- svnpenn 5y agoThe fact that OAuth isnt mentioned a single time in the article is glaring. You should at least have a paragraph like "why not just use OAuth?" where you answer that question. Otherwise it seems youre avoiding the question on purpose, as these two items are clearly in the same space.
- alex-olivier 5y agoThanks for the feedback - are are working on adding more comparisons of technologies onto https://cerbos.dev https://cerbos.dev and will certainly make sure to include OAuth