https://engine.speedle.io/tags/guide/ Recent content in Guide on Speedle Hugo -- gohugo.io en-us Fri, 18 Jan 2019 21:19:44 +0800 https://engine.speedle.io/docs/api/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/api/ Client libraries for Java, Python, Go, .NET, Rust and Node.js/TypeScript are in SDKs. REST APIs These are reference contracts for your configured PMS/ADS or asserter endpoint. speedle.io serves documentation and the browser Playground; it is not a hosted PMS/ADS service. Supply JSON with Content-Type: application/json, and configure TLS/mTLS and caller access controls. Policy management API Authorization decision API Token assertion webhook Policy and role-policy IDs are strings. PMS responses are flat objects; authorization permissions use permissions (plural). https://engine.speedle.io/docs/api/decision_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/api/decision_api/ Reference for your configured ADS. Request attributes are typed arrays; diagnostic attributes are objects. Security and endpoint configuration. This is a contract reference, not a backend hosted by speedle.io. (function() { var url = "\/swagger\/policy-check.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle.plugins.DownloadUrl ], validatorUrl: null, layout: " https://engine.speedle.io/developer/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/developer/ TBD Policy Administrator Understand the basics of SPDL to model policies Deploy your Application Leverage Policy Discovery Mode Use the Policy Management Service API Application Developer Understand the basics of SPDL Policy Management Service API Authorization Decision Service API Token Assertion API https://engine.speedle.io/devops/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/devops/ TBD Policy Debug? Policy Administrator Understand the basics of SPDL to model policies Deploy your Application Leverage Policy Discovery Mode Use the Policy Management Service API Application Developer Understand the basics of SPDL Policy Management Service API Authorization Decision Service API Token Assertion API https://engine.speedle.io/docs/api/management_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/api/management_api/ Reference for your configured PMS. Requests and responses are JSON; policy IDs are strings and responses are flat objects. Security and endpoint configuration. This is a contract reference, not a backend hosted by speedle.io. (function() { var url = "\/swagger\/policy-manage.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle. https://engine.speedle.io/docs/security/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/security/ Protect both API transports Speedle’s standalone PMS and ADS expose REST and gRPC. Both now use the same --insecure, --cert, --key, --client-cert and --force-client-cert transport settings. Invalid certificates or trust configuration cause startup to fail; secure mode does not fall back to plaintext. TLS encrypts the connection and authenticates the server. To require authenticated clients, provide a client CA with --client-cert and set --force-client-cert=true. Without that flag, a configured CA validates a client certificate only when the client supplies one. https://engine.speedle.io/docs/pms/ Fri, 18 Jan 2019 21:19:44 +0800 https://engine.speedle.io/docs/pms/ Policy Management Global Policy Policy Discovery Policy Diagnosis https://engine.speedle.io/docs/api/asserter_api/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/api/asserter_api/ Webhook reference. errCode is an integer and attributes is an object. Configure the actual endpoint in the ADS asserter configuration. Security and endpoint configuration. This is a contract reference, not a backend hosted by speedle.io. (function() { var url = "\/swagger\/asserter.yaml"; const ui = SwaggerUIBundle({ url: url, dom_id: '#swagger-ui', deepLinking: true, presets: [ SwaggerUIBundle.presets.apis ], plugins: [ SwaggerUIBundle. https://engine.speedle.io/docs/usecases/ Mon, 01 Jan 0001 00:00:00 +0000 https://engine.speedle.io/docs/usecases/ Application specific policies Alex Chan is a developer who is implementing a simple application with golang. His application requires Authorization and he doesn’t want to re-invent the wheel. Alex can use an open source choice like Speedle for Authorization. Centalized policy enforcement and management Jin Chen is a security manager of multinational company. His team monitor dozens of internal systems. Different systems use different authorization mechanisms, different policy languages. They are eager to find a solution to manage all these systems efficiently.