DEV Community

Cover image for Microservices Authentication and Authorization Using API Gateway

Microservices Authentication and Authorization Using API Gateway

Ege Aytin on February 27, 2024

In today's complex microservices architecture, ensuring robust authentication and authorization is a critical challenge. This challenge arises be...
Read full post
Collapse
 
dorneanu profile image
Victor Dorneanu •

Nice project! However, what are the main advantages over the ORY bundle?

Collapse
 
egeaytin profile image
Ege Aytin Permify •

Hi @dorneanu, there are a couple of major differences between Ory's authorization solution, Keto:

  • Multi Tenancy: Our architecture is tenancy-based, which means you can create custom authorization models and relation tuples accordingly for different tenants and manage them in a single place. This is an important feature, especially for internal authorization use cases.
  • Attribute Based Access Control: We're supporting attribute-based access control and contextual permissions. This gives users the ability to define more complex policies using dynamic attributes such as boolean variables, IP range, time periods, location, etc.
  • Schema Management & Visibility: We're taking an approach that help engineering teams to ease and streamline the management and collaboration of their authorization systems. We have features like Schema Stating to manage schema changes in different stages, Partial Schema Update to update schema smoothly with multiple engineering teams, Relationship Bundles to streamline relation tuple creation, and more.
Collapse
 
dorneanu profile image
Victor Dorneanu •

Ok, thanks for the explanations!