Best of Authorization — October 2024

1. 1
   Article

   Community Picks·2y

   Build a Login and Logout API using Express.js (Node.js)

   Learn to build a secure login and logout system using Express.js in Node.js. The tutorial covers setting up development files, installing dependencies, and creating a MongoDB database. It explains the basics of authentication and authorization, the logic for user registration and login, password hashing, and session management using JWT tokens. Additionally, it shows how to implement middleware for verifying user sessions and roles, and how to handle user logout securely.

   108
2. 2
   Article

   Community Picks·2y

   better-auth/better-auth: The most comprehensive authentication library for TypeScript

   Better Auth is a comprehensive, framework-agnostic authentication and authorization library for TypeScript. It aims to reduce the need for extensive additional code by offering a rich set of features out of the box, while prioritizing best practices and type safety. Currently in beta, the project focuses on simplicity, consistency, and predictability across different platforms. It supports plugins for advanced functionalities like 2FA and multi-tenant support, and is licensed under the MIT License.

   90

   3
3. 3
   Article

   Cerbos·2y

   Implement authorization and access control in an Express application

   Learn how to implement role-based access control (RBAC) in an Express application using Cerbos PDP. This guide covers necessary installations, setting up a project, defining roles and permissions through policy files, and configuring routes to enforce RBAC. The example uses a learning management system to demonstrate the process.

   43

   8
4. 4
   Article

   Cerbos·2y

   What is authorization as a service?

   Authorization as a service involves using third-party services to manage user permissions within an application, alleviating developers from maintaining complex authorization systems. This enables developers to focus on core features while benefiting from improved security and reduced costs.

   33

   10
5. 5
   Article

   Cerbos·2y

   How to implement authorization using Cerbos in Go

   Learn how to implement robust authorization in a Go web application using Cerbos and Echo. This guide walks you through setting up a secure RESTful API to enforce access control policies, detailing necessary components like in-memory databases, API routes, and handlers. By the end, you'll be able to create an efficient role-based access control (RBAC) system, ensuring users have appropriate permissions based on their roles.

   31

   6