permify
Authorization service
An open-source authorization service that abstracts access control logic and provides fine-grained, scalable, and extensible mechanisms for managing permissions and policies in a cloud-native and distributed environment.
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.
5k stars
26 watching
225 forks
Language: Go
last commit: 4 months ago
Linked from 1 awesome list
abacaccess-controlaclauthorizationciamcloud-nativedistributedfgafine-grained-access-controlgolanggrpckubernetesleast-privilegepermissionpermissionsrbacrebacsecurityzanzibar
shospodarets/awesome-platform-engineeringRelated projects:
| Repository | Description | Stars |
|---|---|---|
 authzed/spicedb | An authorization system that stores and evaluates access control lists for fine-grained authorization data | 5,207 |
 permitio/opal | Provides real-time updates and administration for policy engines in cloud-native applications. | 5,149 |
 ory/keto | A permission server built using Google's Zanzibar approach, supporting scalable and customizable access control with a flexible language. | 4,875 |
 amplication/amplication | An AI-powered development platform that generates production-ready backend code for .NET and Node.js applications | 15,406 |
 varvet/pundit | An authorization system based on object-oriented design and pure Ruby classes | 8,313 |
 ergo/ziggurat_foundations | Framework agnostic authorization and permission management toolkit | 71 |
 pomerium/pomerium | An access proxy service providing secure, clientless connections to internal web apps and services. | 4,078 |
 cerbos/cerbos | An authorization layer that enables context-aware access control rules for application resources using YAML policies and APIs. | 3,446 |
 cakephp/authorization | A middleware plugin providing framework around access control and authorization in the CakePHP framework. | 75 |
 mojolicious/mojo | A real-time web framework for building cloud-native applications with Perl. | 2,671 |
 authorizer-tech/access-controller | A highly scalable implementation of an access-control system inspired by Google Zanzibar. | 72 |
 pipedreamhq/pipedream | An integration platform that enables developers to automate workflows across multiple applications and services using pre-built components and custom code | 9,075 |
 easegress-io/easegress | A cloud-native traffic orchestration system designed to manage high availability, traffic flow, and security for microservices applications. | 5,789 |
 apex/up | A tool that automates the deployment of scalable and secure web applications on AWS using serverless technologies | 8,803 |
 aserto-dev/topaz | An authorization service providing fine-grained, real-time policy-based access control for applications and APIs | 1,130 |