Скачать с ютуб Apigee Tech Talk: A General purpose API Authentication and Authorization engine [2024] в хорошем качестве

Apigee Tech Talk: A General purpose API Authentication and Authorization engine [2024]

Many APIs need to be shared to people outside the domain of production - partners, customers, external people. And when sharing, then you need to consider authorization - who gets to use which APIs, and how? This session walks through the architecture of a general purpose API Authn/Authz engine, built on Google Cloud Identity Platform, Apigee, and Open Policy Agent (OPA) in Cloud Run. I don't have a repository with everything shown in this screencast, but there is a repo that shows how you can build an Apigee proxy that exchanges a firebase ID Token for an Apigee-minted OAuth access token. here: https://github.com/DinoChiesa/Apigee-... That is just ONE element that was included in this demonstration. Stuff I showed in the demonstration that is not included in that repo: the scripts for setting up OPA in Cloud Run the web app that I used to demonstrate the API Authn and Authz the API Proxy that would call into OPA to check authorization.