3 ms·
I figured that this is usable directly as a service, we only bring our own authentication layer (password + 2FA) and use SpiceDB to check the permissions? Howe
by tmikaeld 5y ago
I figured that this is usable directly as a service, we only bring our own authentication layer (password + 2FA) and use SpiceDB to check the permissions?
However, the docs mention that we're required to have an authzed account, but this is not required when hosting it ourselves?
Would be nice to have a step-by-step guide for the self-hosting so that it's apparent how the flow goes.
PS: Would also like to use it in Cloudflare Workers, but they don't support gRPC yet (Only REST and HTTP/1.1).
- jakemoshenko 5y agoYes you can use it directly as a service with your own authentication. There is no Authzed account required. The docs are built around the idea of using Authzed.com, the hosted SpiceDB solution for protecting your first app. We will try to put together a guide around self-hosting SpiceDB. For usage from CloudFlare workers and other non-http/2 friendly environments, we're considering adding a gateway which can speak regular http natively. Bolt-on solutions like grpc-web or more invasive solutions like adding twirp support will be considered. Do you have a preference?
- tmikaeld 5y agoIf you're talking about: https://pkg.go.dev/github.com/improbable-eng/grpc-web/go/grpcweb https://pkg.go.dev/github.com/improbable-eng/grpc-web/go/grp... Then it looks good to me, as long as it's HTTP/1.1 or WebSockets, it will should work everywhere. Is this something you can add soon? We're in a refactoring stage and would love SpiceDB to be a part of it all. (I also created an issue in the repo)