Join
6
2 Comments

Quick demo for a plug-&-play authorization API, to manage access control

by Firatcan DOGAN

Hey everyone,

We have been building things with my friends for quite a while. But me and my friends hate building authorizations again, and again.

From time to time we work on projects as commissioners, building a flexible and future-proof access control is overwhelming. Also, there are tons of solutions for Authentication, but not much for Authorization.

Usually, people use Django like frameworks or their own boilerplates. But it becomes vain over time, and while focusing on your daily work it's hard to update those.

So we build a plug-&-play API for that. I wanted to share a quick guide.

Here's a quick video:
Permify | Plug-&-Play API

So how do you handle your Authorization?

Avatar for Firatcan DOGAN Firatcan DOGAN
posted to Icon for group Developers
Developers
 on December 29, 2021
Say something nice to NoFunnyMan…
Post Comment
  1. 2

    I've done very basic Authorization integration before and it's definitely painful. Good job on the demo, I like that you just have to add in a simple Provider and a Permission (btw I think you should call it Permission or Permify instead of PermifyComponent, feels too verbose) around the UI element to control whether the user can access it or not.

    Questions:

    1. I noticed that the permission type is a string that you add, could you make it a function so I create dynamic permission controls? For example if the user has x and y permission let them as access etc.

    2. How are the users connected into that UI to manage permissions?

    3. Do you provide Authentication as well? If not, you should def write a guide on the recommended way to do Authentication for devs, whether it's Firebase, Supabase, passport js etc. The reason is if someone is doing authorization, they for sure need authentication as well.

    Overall fantastic work, you should put this on HN, folks there always have strong opinions, for better or worse :)

    User Avatar sukh
    ·
    4 years ago
    ·
    Reply
    1. 1

      Hey Sukh,

      Thanks for the feedback! Really appreciate it.

      1. We're building ABAC and policies where you'd be able to do that.
      2. Simple conf. with link sessions etc.
      3. Unfortunately we do not offer Authentication, but actually, you can use any auth. the method you want. - Perhaps we'll make a guide for both-
      Avatar for Firatcan DOGAN NoFunnyMan
      ·
      4 years ago
      ·
      Reply
Trending on Indie Hackers
I built a tool directory that doesn't pretend every founder has the same needs User Avatar 62 comments Drop your landing page URL. I'll use Ferguson to tell you why visitors might be leaving User Avatar 46 comments AI helped me ship faster. Then I forgot what my product actually does. User Avatar 37 comments I Was Picking the Wrong SaaS Tools for Two Years. Here's the Mistake I Finally Figured Out. User Avatar 29 comments Most early-stage SaaS companies miss churn signals — here’s how to catch them early User Avatar 27 comments How I Run a 1.7M Product Search Engine at 66ms on a $0 Hosting Budget User Avatar 19 comments