Blog
Company Updates & Technology Articles
Addressing challenges with Github's authorization model
Github's authorization model uses a combination of roles and scopes, which makes it hard to pre-compute a user's access ahead of time.
The Architectural Challenge of Authorization
Unlike most developer APIs, authorization is in the critical path of every application request, and requires a different architecture.
Jul 11th, 2021
Welcome to Modern Authorization
Why we started Aserto: the missing developer API for application authorization.
Jun 8th, 2021
OAuth2 Scopes are NOT Permissions
OAuth2 scopes were never intended to be an authorization mechanism, and indeed are a bad idea when used as a substitute for a real authorization architecture.
May 3rd, 2021
Authentication != Authorization
Authentication is a solved problem. But authorization remains a far bigger problem, and is far from solved.
Apr 18th, 2021
The Five Principles of Authorization
Five principles that any developer solution for application authorization should adhere to.
Apr 3rd, 2021
Why separate policy from your code?
Embedding your authorization logic inside your application is a constant source of pain. Separating policy from code brings many benefits.
Mar 5th, 2021