Authorization: Library or Service?

Scaling

Consistency of Behavior

Reasoning and Validation

Authorization information flow

  1. The application can provide identifiers for the user and the resource, and the decision engine will resolve the rest of the required information out of band
  2. The application will provide all the required information to the decision engine (and not just the identifiers)

Consumer and Contributors Personas

Auditing

Summary

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store