Design Complex Authorization with Ory Keto
summary
A minimal Node.js cloud-storage example uses Ory Keto and its relation tuples to record file ownership and then perform Check API reachability queries for authorization. The demo creates owner tuples, adds a second “read” tuple as a workaround subject-set rewrite, and enforces checks in GET/POST handlers; the autogenerated gRPC client calls Keto, the local demo runs with npm i / npm start and Keto runs in the background, and the example successfully blocks non‑owners.
AI-written summary · about
chapters (6)
- 0:00Introduction to Keto concepts
- 3:28Building the Node.js server
- 5:17Implementing file ownership
- 9:28Enforcing access permissions
- 12:05Refining access via workarounds
- 15:51Conclusion and resources
related talks
25m Introducing the Ory Network
18mMake Auth great again with Ory
16mHow to move your RBAC into Ory 
23mAuthorization in GraphQL: Peanut Butter and Chocolate
39mKicking Security Chain Attacks to the Curb with Kyverno and Notary...
34mCustomizing OPA for a "Perfect Fit" Authorization Sidecar
43mBuilding Authorization with Node.js: Dos and Don’ts
51mApproaching OAuth2