web-security

Eugen 2024-06-01T05:08:07.158779Z

hi, is there a clojure library that can do the Authorization part similar to what Apache Shiro does - ?

currentUser.isPermitted( "lightsaber:wield" )
currentUser.isPermitted( "winnebago:drive:eagle5" )
https://shiro.apache.org/10-minute-tutorial.html https://shiro.apache.org/java-authorization-guide.html

braai engineer 2025-12-04T00:27:20.394019Z

@eugen.stan, https://github.com/theronic/eacl is a situated https://en.wikipedia.org/wiki/Relationship-based_access_control authorization library based on https://authzed.com/spicedb, built in Clojure and backed by Datomic, that directly addresses the problem of fine-grained hierarchical permissions: • Source: https://github.com/theronic/eacl • Rationale here: https://eacl.dev/ • EACL Version 6.1 offers sub-millisecond performance. Refer https://x.com/PetrusTheron/status/1996344248925294773. • EACL is used at https://cloudafrica.net/. (I am the author.)

fabrao 2024-08-31T23:19:44.949749Z

@eugen.stan I used this one https://github.com/tuhlmann/permissions

👍 1
seancorfield 2024-06-01T05:40:35.378519Z

Use Shiro via Java interop?

Eugen 2024-06-01T09:09:36.086939Z

thanks, planning to do that, was curios about solutions in clojure land

Eugen 2024-06-01T09:10:50.198479Z

do you have experience with shiro?

Eugen 2024-06-01T09:11:09.931649Z

also curios for some feedback

dominicm 2024-06-05T14:26:45.536699Z

I recently had this question and ended up writing my own using clojure's hierarchy system. Which is to say, I didn't find a good library that already existed.

Eugen 2024-06-05T15:07:59.392949Z

I think shiro is a good library but does not have integration with clojure / ring