The best authorization engines, according to hackers
4 authorization engines recommended in Hacker News comments over the past year, ranked by how many separate people recommend each one.
All authorization engines
- Cedar policy languageOpen-source language for writing authorization policies that can be formally analyzed and return a binary allow or deny decision.7recommend
- OpenFGAPeople recommend it for centralizing authorization policies and handling complex fine-grained ReBAC permissions.6recommend
- SpiceDBOpen-source Zanzibar-style authorization server for centralized, graph-based permission queries across resources and subjects. Critics object to its opt-out telemetry.5recommend
- Rego (Open Policy Agent)Policy language for Open Policy Agent that keeps a JSON-in, JSON-out pipeline and suits jq-style queries. Main caveat: dynamically typed, so little type protection.5recommend