Back To Schedule
Tuesday, October 31 • 9:00am - 9:50am
[Virtual] PRO Workshop (API): Revolutionizing API Access Control with Decentralized Authorization

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
Gabriel L. Manor, Permit.io, Director of DevRel

The common assumption about access control in APIs is to cover the introductory auth phase as part of the API gateways and let the application code cover the advanced authorization and permission management.
In the modern stacks of APIs, however, applications are usually decentralized and disconnected from each other while the APIs in the product serve all needs together. The old authorization assumption can lead to implementation and efficiency problems in access control.
This talk will discuss decoupling policy and permissions from application code, using open-source tools for decentralized but unified policy solutions, and running sidecars to handle permissions efficiently. We will build a demo product that proxied API calls and do an advanced authorization in the phase it should be, the API gateway.

avatar for Gabriel L. Manor

Gabriel L. Manor

Director of DevRel, Permit.io
I'm a senior full-stack developer with a favorite kid named Frontend.For over ten years now, I've enjoyed writing clean code, simplifying complex problems, leading feature development, and influencing innovation every day.When I’m not busy with code, you’ll find me talking about... Read More →

Tuesday October 31, 2023 9:00am - 9:50am PDT
VIRTUAL API World -- Workshop Stage A https://app.hopin.com/events/api-world-2023-ai-devworld/sessions