惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

B
Blog
The Cloudflare Blog
J
Java Code Geeks
Apple Machine Learning Research
Apple Machine Learning Research
T
Tailwind CSS Blog
L
LangChain Blog
Recent Announcements
Recent Announcements
Hugging Face - Blog
Hugging Face - Blog
Microsoft Security Blog
Microsoft Security Blog
F
Fortinet All Blogs
Microsoft Azure Blog
Microsoft Azure Blog
V
V2EX
I
InfoQ
博客园 - 司徒正美
T
The Blog of Author Tim Ferriss
G
Google Developers Blog
云风的 BLOG
云风的 BLOG
aimingoo的专栏
aimingoo的专栏
小众软件
小众软件
H
Help Net Security
博客园 - 三生石上(FineUI控件)
S
SegmentFault 最新的问题
B
Blog RSS Feed
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知

Cerbos - All Posts

Authentik vs Keycloak: Self-hosted IdP comparison Mapping business requirements to authorization policy for automotive Fine-grained authorization for AI gateways EIC 2026: Stop counting agents, protect what they can touch Agent skill for writing authorization policies in Claude Desktop Identity security in 2026 EIC 2026 takeaways: the identity stack built for humans will not hold up for AI agents Already have authentication? Here's the authorization layer you still need. Tokens are authorization decisions: a guide to policy-driven token issuance What is a Runtime Authorization Platform It's a dimmer switch, not a kill switch. How CISOs are rethinking AI agent governance From maps to bitmaps (and from bitmaps to bitmaps) AuthZEN, Shared Signals, SCIM Events, IPSIE: Notes from the OpenID Enterprise Panel How do you update authorization policies without redeploying your application? IIW42 recap: Where agent authorization got real Cerbos PDP v0.52.0/v0.53.0: Engine performance, security hardening, and CEL path functions Authorization Management Platforms: what they do, how they work, and where they fit PocketOS AI coding agent deleted a production database in 9 seconds Non-Human Identity management still has a blind spot Supabase alternative in 2026: Best open source auth options Benefits of on-premise authorization: Why enterprises are moving toward self-hosted Authorization policies: How to write, test, and validate them (faster with AI) Agent skill for writing authorization policies How much does it cost to build authorization in-house? Why centralized authorization governance reduces incident response time OPA alternative Why AI agents make authorization a right now problem Modernizing legacy application authorization: why it’s your biggest security blind spot How to add authorization to legacy applications without code changes 5 authorization blind spots auditors find, and how to fix them
Policy outputs, storage overlays and more - Cerbos v0.27 ...
Alex Olivier · 2023-06-14 · via Cerbos - All Posts

A bumper release notes post with v0.27 and v0.28 being rolled out in the last two weeks which adds support for user-defined outputs from policies, storage overlay support for fallback scenarios also Kafka and tests suites updates.

We have been working closely with users of Cerbos such as Blockchain.com, Utility Warehouse, 9fin, Salesroom, and Doorfeed on this release and can’t wait to hear more about what you would like to see in future releases - join our Slack community to join the conversation.

User-defined Policy Outputs

Cerbos now supports returning user-defined output values from policy evaluation. Policy authors define an optional expression to evaluate if a rule is activated and Cerbos collects and returns the set of outputs as part of the API response. This enables developers to take specific actions in their applications based on the outcome of an authorization check.

Support for this new feature has been added to the Cerbos Playground, and this example demonstrates how to return outputs.

See the outputs documentation for more information.

Testing Policy Outputs (v0.28)

v0.28 added in support to write policy tests to verify that your policies produce the correct output values. Checking for output values in tests is optional but, if you do define any output expectations, the tests will fail if the produced output does not match the expectations. See Validating and testing policies for information on testing.

Storage Overlay (v0.27)

The new overlay storage is a special driver that allows you to configure any two Cerbos storage drivers as base and fallback stores. If the base store becomes unavailable for some reason, Cerbos automatically switches to the fallback store until the base becomes available again. See the overlay documentation for more information.

Kafka Compression Support (v0.28)

Audit log entries written to Kafka can now be compressed using one of the supported compression algorithms. The default algorithm used is Snappy. Thanks to @shangardezi for contributing this feature.

You can find the full release notes for v0.27 and v0.28 on docs.cerbos.dev and if you have any questions join our Slack community.