Как мы делаем разграничение доступа в одной платформе Сбера
Наша команда создаёт сервис управления доступом (коротко - СУД) в одной из самых больших в Сбере платформ - Платформе Кибербезопасности, или просто ПК…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
- игры
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
claude
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
tutorial
typescript
webdev
SecretAuth – UX-решение для авторизации посредством приватного ключа
Мир сильно изменился с начала 21 века. В том числе, что касается систем авторизации. Мы продвинулись от авторизации через обычный логин и пароль к исп…
SaaS Security Best Practices: Auth, Authorization, and Data Protection
Security is not a feature — it is a property of your entire architecture. This guide covers the security practices implemented in production SaaS appl…
Implement Authorization with Role-Based Access Control (RBAC) in Golang
This is part 2 of our authentication and authorization series. In the previous part, we implemented an authentication system from scratch in Golang wi…
A Deactivated Admin Could Still Use Their Token. That's When Dual-Mode JWT Stopped Being About Speed.
What building cross-service RBAC taught me about the difference between a fast check and a correct one VaultPay is a wallet microservice I built on to…
Supabase Authentication & Authorization Patterns
Supabase Authentication & Authorization Patterns Authentication and authorization are the foundation of secure applications. Supabase provides a c…
Building Dynamic RBAC in React 19: From Permission Strings to Component-Level Access Control
Building Dynamic RBAC in React 19: From Permission Strings to Component-Level Access Control String-based permission checks scattered across your Reac…
Introducing Zopa: a 60 KB authorization engine for proxy-wasm, written in Zig
There are plenty of times you want to delegate "let this request through, or block it" to a wasm filter inside Envoy. API gateways, service mesh bound…
Authorization at Scale: Access Levels, Roles, and Compact Decisions
Authentication answers "who are you?" Authorization answers the harder question: "are you allowed to do this?" By the time a request reaches this stag…