Learning more about OIDC, OAuth and OPA

2024-01-15 20:12:00

Almost a month ago, I did a deepdive on how OAuth really works, as part of my preparations for the PDSO CASP exam. 

Well, it's time for another one! Because I really wanted to know how you would use OAuth in conjunction with OPA (open policy agent) to drive the access controls on your API and business logic. 

I spent another six hours, watching videos and reading through sample code to put two-and-two together. Here's linkks to resources that really helped me.

• A great OIDC+OAuth+OPA video by Curity.
• Flask-OPA, a demo API which uses an OPA policy for authorization checks.
• PyPi Flask-OPA, documentation for a Python that deals with OPA.
• API Authorization with Open Policy Agent, API Days, Paris 2022
• Open Policy Agent, Intro and Deep-Dive, KubeCon + CloudNativeCon, Valencia 2022
• OPA Demo, a demo app which combines OAuth and OPA.
• Anders Eknert's Github.

kilala.nl tags: studies,

View or add comments (curr. 0)