ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Microservices duplicate permission logic across code. Centralizing fine-grained access with Ory Keto’s ABAC policy engine decouples decisions from services and integrates with OAuth2/OIDC flows.
Decouple authorization from your code using Ory Keto's relation-based access control (ReBAC). Learn how to use relation tuples and the Check API to manage fine-grained permissions.
Goal Determine how Ory Keto handles cache invalidation when policy changes occur, ensuring no stale decisions persist beyond the configured TTL. Constraints & Uncertainty In‑memory cache keyed by CACHE_TTL_SECONDS, default 300 s. Documentation does not specify automatic invalidation triggers on policy mutation. Concurrent evaluations may read stale entri
ory