Repository navigation
Implement Lua and Rust clients #1526
Description
Activity
HAProxy also offers lua support IIRC.
Traefik and Caddy also have some features that could probably integrate in a similar manner (either via standard config like
basicauth(Caddy, Traefik) for getting the user via header andforward_auth(Caddy, Traefik) to query Permify, or perhaps as a separate plugin/module).While Forward Auth can be used to delegate to another service that authenticates with SSO, that same service may lack in control/flexibility of managing permissions but the response can provide relevant auth headers associated to the authenticated user (eg: Authelia, AuthCrunch /
caddy-security) and their groups/claims/role which another request could then be forwarded to Permify for an authorization check.I personally like Caddy (and Caddy Docker Proxy) for it's simplicity with
Caddyfile, but Traefik is also quite popular with the label annotation feature for configuring routing to service containers. Perhaps these would compliment the existing guides that already encourage using a container for Permify?Compared to a specific application integration, the user would be able to manage the checks at the routing level prior to a request being forwarded by the reverse proxy to a service or API? Might benefit adoption / awareness of Permify further that way, which may further encourage adoption in downstream services? (in other scenarios it makes more sense for the application / service itself to perform checks with Permify, but for routing access based on identity that could be done at the reverse proxy level)
If instead going the custom plugin route, some references might be Souin and Sablier. Both are Go based with various reverse proxy and other integrations.
Also would be good to see a rust client 😎
Rust is increasingly popular choice for extremely fast and memory safe programs.
Lua is an easy to use scripting language similar to Javascript. It's often chosen for use in embedded systems. With https://github.com/openresty/lua-nginx-module , you could use permify to control web server permissions.