Oso's Blog

Articles about authorization, and other news from Oso's engineering team

How I Implemented Type Inference for Request Validation

A case study on why to perform request validation on the data coming into your APIs, and how we wrote a type inference algorithm for ours - Oso Cloud.

August 2, 2022 — Vijay Ramamurthy
Internals

Abhishek Parmar Joins Oso as Technical Advisor

Abhishek Parmar, co-creator of Google Zanzibar & Airbnb Himeji, joins Oso as technical advisor.

July 12, 2022 —
Customers & Ecosystem

Oso Summer 2022 Hackathon

Oso Summer 2022 Hackathon

July 11, 2022 —
Internals

Using Oso Cloud With Kubernetes Authorization Webhooks

how to use Kubernetes Authorization webhooks to defer authorization decisions to Oso Cloud, a fully-managed authorization service.

June 3, 2022 — Shaun Verch
Best Practices

Using Rust, SQLx and Rocket in Oso Cloud

How we use Rust, SQLx and Rocket to power Oso Cloud, our fully-managed authorization as a service

May 19, 2022 — Steve Olsen
Internals

GraphQL Authorization Patterns

An overview of different patterns for building authorization in GraphQL

February 1, 2022 — Patrick O'Doherty
Best Practices

Building permissions in a Django app in 30 minutes

Nearly every application needs to enable its users to see only their data. Many other applications go further and add more controls, like sharing, or making some content private and public. In this post, use Django and django-oso to build a simple social app that allows users to share posts, like Twitter. Our app will use oso to implement access control for posts.

January 18, 2022 — David Hatch
Best Practices

Oso Winter Hackathon

Oso winter hackathon 2021 - an opportunity to push boundaries and hack on fun projects we think the Oso product could do.

January 14, 2022 —
Internals

How we built a VS Code extension with Rust, WebAssembly, and TypeScript

How we built Language Server Protocol (LSP) support for the Oso VS Code extension with Rust, WebAssembly (Wasm), and TypeScript.

January 10, 2022 — Gabe Jackson
Internals

Managing Authorization Across Microservices on the International Supply Chain Engineering team at Wayfair

Wayfair's journey from monolith into microservices and how it subsequently built out distributed authorization using Oso.

December 14, 2021 —
Customers & Ecosystem

How We Turn Authorization Logic Into SQL

How we developed Oso to let you query your database using your authorization policy.

November 23, 2021 — Gwen Whelan
Internals

Comparison: Oso vs. Open Policy Agent (OPA)

Oso is an authorization library that includes a declarative policy language. OPA is an authorization product that includes a declarative policy language. Despite that, there are many significant differences between the two! Here's a comparison.

October 27, 2021 — Graham Neray
Best Practices

How We Built a Cross-Platform Library with Rust

Oso has libraries for Python, Ruby, Java, Javascript, Go, and Rust, and each of those libraries are based on a core that is written in Rust.

October 25, 2021 — Steve Olsen
Internals

Developer Den with Guy Podjarny

Guy Podjarny (Founder & President of Snyk.io) on optimizing developer experience, introducing security to developers, and when to offer a freemium product.

October 6, 2021 —
Customers & Ecosystem

Permissions Pep Talk

#PermissionsPepTalk. Not enough celebrities have talked about authorization and permissions in the public domain, so today we're bringing the topic to the fore as well. Here's what Alice Cooper, Lisa Loeb, Ghostface Killah, Kenny G, Mike Ditka, and Lena Headey have to say to developers working on permissions...

September 24, 2021 —
Customers & Ecosystem

Oso 0.20 is out with a big step up for modeling, data filtering, and enforcement

0.20 includes new approaches to: 1. Authorization modeling, including built-in primitives for common patterns like RBAC and ReBAC. 2. Data filtering for authorizing collections of data 3. APIs for enforcing authorization at different layers of the stack

September 15, 2021 —
Product

Developer Den with Lea Kissner

Lea Kissner (co-designer of Google Zanzibar and Head of Privacy for Twitter) on Zanzibar’s design decisions, user-friendly ways to structure access controls, and when (not) to write your own Zanzibar.

September 1, 2021 —
Customers & Ecosystem

Oso Use Case: A Common Way to Handle Authorization Across Many Apps at Bjerk.io

We sat down with Simen A. W. Olsen of Bjerk.io, an expert software consultancy. He's used Oso in three projects now, each very different from the other: Indiv, Tabetalt, and nest.js-oso

August 31, 2021 — Lito Nicolai
Customers & Ecosystem

Guide to Role-Based Access Control (RBAC) in Ruby

A configuration-based approach to adding role-based access control to your Ruby application.

August 23, 2021 — Graham Kaemmer
Best Practices

Developer Den with Jason Warner

Oso's Developer Den interview with Jason Warner (VC at Redpoint Ventures, formerly CTO of GitHub and Head of Engineering at Heroku) on his path to computers, the trickiest technical problems, and programming as a superpower.

August 10, 2021 —
Customers & Ecosystem

Oso Community Hackathon

We run internal hackathons at Oso as a way to experiment with new ideas, prototype wish list features, build some off-the-wall things and have fun. In the past, we've prototyped features like data filtering in Python and built games like Polar Adventure. For the first time, in our most recent hackathon earlier this month we opened up the hackathon to the Oso community members, and they took the 🎂.

July 27, 2021 —
Internals

Developer Den with Josh Ma

Oso's Developer Den series with Josh Ma (former CTO of Benchling and founder of Airplane) on hiring, SaaS businesses, and technical tools.

July 8, 2021 —
Customers & Ecosystem

Oso Use Case: Adding Structure to Authorization at Intraverbal

We sat down to speak with Harley Lang, who’s been working on Intraverbal, a new content creation platform for educators and students. Intraverbal has a novel way of constructing lessons, and both students and teachers use the platform. Harley had been hand-rolling his authorization code, and when it started to get unmanageable, he reached for Oso to simplify his authorization design. Intraverbal is an exciting project, and we at Oso were very interested to see the role the Oso library played in the app!

June 8, 2021 — Lito Nicolai
Customers & Ecosystem

Developer Den with Charity Majors

Oso's Developer Den series with Charity Majors (Co-Founder/CTO of Honeycomb) on reluctantly writing a database, Honeycomb's strategy for hiring, and why you should deploy immediately after writing code.

June 2, 2021 —
Customers & Ecosystem

Introduction to Rules in Polar

Intro to rules in Polar, Oso's policy language, and how they work together to define authorization.

May 27, 2021 — Anne Ogborn
Internals

Get updates on Oso.

We won't spam you. Ever.