Skip to content
Standard Reader
Log in
Tag

Authorization

Articles and publications tagged Authorization across the Atmosphere.

72articles47publications
eiuspkz
eiuspkzNov 3, 2026
Fifty-three SpiceDB titles mark an authorization service that should not face the internet
SpiceDB title matches and the preshared-key, TLS, and listener boundaries of an authorization service.
zoomeyespicedb
johnettagaweraks
johnettagaweraksNov 3, 2026
JWT verifiers need an explicit token-purpose policy
Explicit JWT purpose, algorithm, key, and audience validation for resource servers.
jwttoken-security
ivanova
ivanovaNov 3, 2026
OpenAPI security schemes describe credentials while servers enforce authorization
Why OpenAPI security requirements do not replace server-side object authorization.
api-securityopenapi
andreagomez205
andreagomez205Nov 2, 2026
Elasticsearch API keys inherit an identity as well as a privilege list
Elasticsearch API keys inherit an identity as well as a privilege list
elasticsearchapi-keys
johnettagaweraks
johnettagaweraksNov 2, 2026
Grafana viewers can reach more data than a dashboard shows
Grafana viewers can reach more data than a dashboard shows
grafanadata-sources
eiuspkz
eiuspkzOct 31, 2026
Read RabbitMQ OAuth scopes as broker permissions, not login metadata
How RabbitMQ OAuth scopes become broker permissions and what to test.
rabbitmqoauth2
eiuspkz
eiuspkzOct 30, 2026
Separate gRPC transport identity from application authorization
Separating gRPC channel authentication from method and object authorization.
grpcmtls
andreagomez205
andreagomez205Oct 29, 2026
MCP tool authorization needs the request, token, and tool in one decision
Per-tool authorization and audience-bound token controls for MCP servers.
MCPauthorization
sorrelthorncroft
sorrelthorncroftOct 27, 2026
Three authorisation holes in one helpdesk stack: what CVE-2026-111937, CVE-2026-111938 and CVE-2026-111939 have in common
Three Frappe advisories share one failure: an object identifier supplied by the caller is treated as a fact instead of a claim. Includes verification steps for each pattern.
securityauthorization
eiuspkz
eiuspkzOct 24, 2026
IntentKit validated tool calls against the wrong list
CVE-2026-76066: IntentKit's executor validated tool calls against the full registry instead of the per-request binding, letting public callers invoke owner-only tools by name.
agentauthorization
Den
DenNov 24, 2025
What's New In The 2025-11-25 MCP Authorization Spec
Preview of authorization changes landing in the 2025-11-25 MCP spec release, marking the protocol's first anniversary with notable auth-flow updates.
mcpauthentication
Den
DenJul 7, 2025
OAuth In The MCP C# SDK: Simple, Secure, Standard
Walkthrough of the new OAuth 2.0 and RFC 9728 PRM support shipped in the official MCP C# SDK, with sample code for protected MCP server authorization in .NET.
mcpauthentication
Den
DenJun 26, 2025
Please Don't Write Your Own MCP Authorization Code
Why most teams should let an API gateway handle the new MCP Protected Resource Metadata flow instead of hand-rolling OAuth in their own server code.
apiauthorization
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito
LocalStack Blog
LocalStack BlogJun 25, 2025
How to test Cognito Integration with Amazon Verified Permissions using LocalStack
LocalStack now supports Amazon Verified Permissions (AVP), allowing you to test your application's authorization logic and Cognito integration entirely on your local machine. This tutorial shows how to use Cedar policies to validate access control without deploying to AWS.
Verified PermissionsCognito