6
2 Comments

Quick demo for a plug-&-play authorization API, to manage access control

by Firatcan DOGAN

Hey everyone,

We have been building things with my friends for quite a while. But me and my friends hate building authorizations again, and again.

From time to time we work on projects as commissioners, building a flexible and future-proof access control is overwhelming. Also, there are tons of solutions for Authentication, but not much for Authorization.

Usually, people use Django like frameworks or their own boilerplates. But it becomes vain over time, and while focusing on your daily work it's hard to update those.

So we build a plug-&-play API for that. I wanted to share a quick guide.

Here's a quick video:
Permify | Plug-&-Play API

So how do you handle your Authorization?

posted to
Developers
 on December 29, 2021
Say something nice to NoFunnyMan…
Post Comment
  1. 2

    I've done very basic Authorization integration before and it's definitely painful. Good job on the demo, I like that you just have to add in a simple Provider and a Permission (btw I think you should call it Permission or Permify instead of PermifyComponent, feels too verbose) around the UI element to control whether the user can access it or not.

    Questions:

    1. I noticed that the permission type is a string that you add, could you make it a function so I create dynamic permission controls? For example if the user has x and y permission let them as access etc.

    2. How are the users connected into that UI to manage permissions?

    3. Do you provide Authentication as well? If not, you should def write a guide on the recommended way to do Authentication for devs, whether it's Firebase, Supabase, passport js etc. The reason is if someone is doing authorization, they for sure need authentication as well.

    Overall fantastic work, you should put this on HN, folks there always have strong opinions, for better or worse :)

    sukh
    ·
    2 years ago
    ·
    Reply
    1. 1

      Hey Sukh,

      Thanks for the feedback! Really appreciate it.

      1. We're building ABAC and policies where you'd be able to do that.
      2. Simple conf. with link sessions etc.
      3. Unfortunately we do not offer Authentication, but actually, you can use any auth. the method you want. - Perhaps we'll make a guide for both-
      NoFunnyMan
      ·
      2 years ago
      ·
      Reply
Trending on Indie Hackers
After 10M+ Views, 13k+ Upvotes: The Reddit Strategy That Worked for Me! 42 comments Getting first 908 Paid Signups by Spending $353 ONLY. 24 comments 🔥Roast my one-man design agency website 21 comments I talked to 8 SaaS founders, these are the most common SaaS tools they use 19 comments What are your cold outreach conversion rates? Top 3 Metrics And Benchmarks To Track 19 comments Hero Section Copywriting Framework that Converts 3x 12 comments