Oso's Blog

Articles about authorization, and other news from Oso's engineering team

What we can learn from The Great British Bake Off

Oso engineer, Mike Cen, gives us a firsthand look into jumping back into the weeds as an individual contributor after being a manager for seven years.

September 21, 2022 — Mike Cen
Internals

Y(e)arning for a Challenge

Oso engineer, Jordan Killpack, relishes opportunities to be a beginner and to follow interests down twisty passages to unknown destinations. Read about how this curiosity led her into knitting and working at Oso!

September 15, 2022 — Jordan Killpack
Internals

Writing My First Web App Using Oso Cloud

As Oso’s first developer experience engineer, Corey Ashby, walks through creating a functional sample application using Oso Cloud.

September 1, 2022 — Corey Ashby
Best Practices

Why I don’t play Pokemon

Oso engineer, Vijay Ramamurthy, shares his journey into formal logic which all stemmed from writing an AI project to play Pokemon.

August 31, 2022 — Vijay Ramamurthy
Internals

Pivoting from Marketing to Authorization

A look into Jesse Lax's, Oso Engineer, journey into software engineering and why he chose to work at Oso.

August 23, 2022 — Jesse Lax
Internals

How I Implemented Type Inference for Request Validation

A case study on why to perform request validation on the data coming into your APIs, and how we wrote a type inference algorithm for ours - Oso Cloud.

August 2, 2022 — Vijay Ramamurthy
Internals

Abhishek Parmar Joins Oso as Technical Advisor

Abhishek Parmar, co-creator of Google Zanzibar & Airbnb Himeji, joins Oso as technical advisor.

July 12, 2022 —
Customers & Ecosystem

Oso Summer 2022 Hackathon

Oso Summer 2022 Hackathon

July 11, 2022 —
Internals

Using Oso Cloud With Kubernetes Authorization Webhooks

how to use Kubernetes Authorization webhooks to defer authorization decisions to Oso Cloud, a fully-managed authorization service.

June 3, 2022 — Shaun Verch
Best Practices

Using Rust, SQLx and Rocket in Oso Cloud

How we use Rust, SQLx and Rocket to power Oso Cloud, our fully-managed authorization as a service

May 19, 2022 — Steve Olsen
Internals

GraphQL Authorization Patterns

An overview of different patterns for building authorization in GraphQL

February 1, 2022 — Patrick O'Doherty
Best Practices

Building permissions in a Django app in 30 minutes

Nearly every application needs to enable its users to see only their data. Many other applications go further and add more controls, like sharing, or making some content private and public. In this post, use Django and django-oso to build a simple social app that allows users to share posts, like Twitter. Our app will use oso to implement access control for posts.

January 18, 2022 — David Hatch
Best Practices

Oso Winter Hackathon

Oso winter hackathon 2021 - an opportunity to push boundaries and hack on fun projects we think the Oso product could do.

January 14, 2022 —
Internals

How we built a VS Code extension with Rust, WebAssembly, and TypeScript

How we built Language Server Protocol (LSP) support for the Oso VS Code extension with Rust, WebAssembly (Wasm), and TypeScript.

January 10, 2022 — Gabe Jackson
Internals

Managing Authorization Across Microservices on the International Supply Chain Engineering team at Wayfair

Wayfair's journey from monolith into microservices and how it subsequently built out distributed authorization using Oso.

December 14, 2021 —
Customers & Ecosystem

How We Turn Authorization Logic Into SQL

How we developed Oso to let you query your database using your authorization policy.

November 23, 2021 — Gwen Whelan
Internals

Comparison: Oso vs. Open Policy Agent (OPA)

Oso is an authorization library that includes a declarative policy language. OPA is an authorization product that includes a declarative policy language. Despite that, there are many significant differences between the two! Here's a comparison.

October 27, 2021 — Graham Neray
Best Practices

How We Built a Cross-Platform Library with Rust

Oso has libraries for Python, Ruby, Java, Javascript, Go, and Rust, and each of those libraries are based on a core that is written in Rust.

October 25, 2021 — Steve Olsen
Internals

Developer Den with Guy Podjarny

Guy Podjarny (Founder & President of Snyk.io) on optimizing developer experience, introducing security to developers, and when to offer a freemium product.

October 6, 2021 —
Customers & Ecosystem

Permissions Pep Talk

#PermissionsPepTalk. Not enough celebrities have talked about authorization and permissions in the public domain, so today we're bringing the topic to the fore as well. Here's what Alice Cooper, Lisa Loeb, Ghostface Killah, Kenny G, Mike Ditka, and Lena Headey have to say to developers working on permissions...

September 24, 2021 —
Customers & Ecosystem

Oso 0.20 is out with a big step up for modeling, data filtering, and enforcement

0.20 includes new approaches to: 1. Authorization modeling, including built-in primitives for common patterns like RBAC and ReBAC. 2. Data filtering for authorizing collections of data 3. APIs for enforcing authorization at different layers of the stack

September 15, 2021 —
Product

Developer Den with Lea Kissner

Lea Kissner (co-designer of Google Zanzibar and Head of Privacy for Twitter) on Zanzibar’s design decisions, user-friendly ways to structure access controls, and when (not) to write your own Zanzibar.

September 1, 2021 —
Customers & Ecosystem

Oso Use Case: A Common Way to Handle Authorization Across Many Apps at Bjerk.io

We sat down with Simen A. W. Olsen of Bjerk.io, an expert software consultancy. He's used Oso in three projects now, each very different from the other: Indiv, Tabetalt, and nest.js-oso

August 31, 2021 — Lito Nicolai
Customers & Ecosystem

Guide to Role-Based Access Control (RBAC) in Ruby

A configuration-based approach to adding role-based access control to your Ruby application.

August 23, 2021 — Graham Kaemmer
Best Practices

Developer Den with Jason Warner

Oso's Developer Den interview with Jason Warner (VC at Redpoint Ventures, formerly CTO of GitHub and Head of Engineering at Heroku) on his path to computers, the trickiest technical problems, and programming as a superpower.

August 10, 2021 —
Customers & Ecosystem

Get updates on Oso.

We won't spam you. Ever.