--- title: Best Authorization posts — March 2024 | daily.dev description: The most upvoted Authorization posts from March 2024, curated by the daily.dev community. canonical: https://daily.dev/tags/authorization/best-of/2024/03 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/authorization/best-of/2024/03 og:type: website og:site_name: daily.dev og:title: Best Authorization posts — March 2024 | daily.dev og:description: The most upvoted Authorization posts from March 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Authorization — March 2024 1. 1 [](https://daily.dev/posts/please-stop-using-middleware-to-protect-your-routes-cn1uvirtg "Please stop using middleware to protect your routes") Article Community Picks · 2y Please stop using middleware to protect your routes The post discusses the use of middleware for route protection and argues against its usage. It highlights the drawbacks of using middleware for authorization and suggests alternative approaches for implementing route protection based on user roles. 63 10 2. 2 [](https://daily.dev/posts/how-to-add-authorization-in-a-node-js-application-fdwxv5mum "How to add authorization in a Node.js application") Article Cerbos · 2y How to add authorization in a Node.js application Learn how to add authorization to a Node.js application using Cerbos. Create roles and permissions for different users and ensure secure access control. Integration with Cerbos provides greater security, scalability, easy compliance, and flexibility for your Node.js app. 23 3 3. 3 [](https://daily.dev/posts/guide-to-web3-authorization-authentication-6hxwno24p "Guide to Web3 authorization & authentication") Article Cerbos · 2y Guide to Web3 authorization & authentication The shift to Web3 involves decentralization and user-centric controls powered by the blockchain. Web3 authentication leverages blockchain technology for secure and user-centric access to DApps. Web3 authorization determines user access through smart contracts and eliminates the need for centralized control. Challenges include scalability, user experience, and private key management. 17 5 4. 4 [](https://daily.dev/posts/protecting-apis-with-jwt-validation-tml67up1t "Protecting APIs with JWT Validation") Article Cloudflare · 3y Protecting APIs with JWT Validation Cloudflare customers can now protect their APIs from broken authentication attacks by validating incoming JSON Web Tokens (JWTs) with API Gateway's JWT Validation. The release addresses feature requests for supporting the Bearer token format, creating multiple JWKS configs, validating JWTs sent in cookies, and excluding managed endpoints in a JWT validation rule. Broken authentication is a major threat in API security, and JWT validation helps enforce a positive security model for authenticated API users. JWTs provide short-lived sessions and enhanced security compared to other authentication methods. API attacks like missing or broken authentication, expired token reuse, and Broken Function Level Authorization attacks can be prevented with proper authentication and authorization. API Gateway's JWT Validation checks JWT signatures, expiration times, and the presence of authentication tokens to protect against these attacks. Cloudflare Access and custom Cloudflare Workers are other options for JWT validation, but API Gateway provides an easier and more manageable experience. Future releases will expand the capabilities of API Gateway, including generating and enforcing authorization policies and enhancing API management with Cloudflare. 16 1 5. 5 [](https://daily.dev/posts/from-the-ground-up-podcast-reshaping-the-landscape-of-devops-through-innovative-authorization-solut-4bece5t26 "From the ground up podcast: Reshaping the landscape of DevOps through innovative authorization solutions") Article Cerbos · 2y From the ground up podcast: Reshaping the landscape of DevOps through innovative authorization solutions Cerbos is a company that empowers developers to implement and manage fine-grained access control in software applications. They provide a solution that simplifies the implementation of roles and permissions, allowing developers to focus on their core products. Cerbos aims to solve the problem of having to build complex authorization layers from scratch, saving developers time and effort. 15 6. 6 [](https://daily.dev/posts/how-to-implement-relationship-based-access-control-rebac--dkaykx6jl "How to Implement Relationship Based Access Control (ReBAC)") Article freeCodeCamp · 3y How to Implement Relationship Based Access Control (ReBAC) ReBAC is a fresh take on authorization that focuses on the relationships between entities. It uses policies represented as graphs to visualize access control. ReBAC differs from other control models by deriving permissions from existing relationships. It offers advantages such as granular and contextual control, efficient management of hierarchies, and scalability and adaptability. 15 [See all Authorization archives](/tags/authorization/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/authorization/best-of/2024/03#page","url":"https://daily.dev/tags/authorization/best-of/2024/03","name":"Best Authorization Posts — March 2024","description":"The most upvoted Authorization posts from March 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/authorization/best-of/2024/03#items","numberOfItems":6,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/please-stop-using-middleware-to-protect-your-routes-cn1uvirtg","name":"Please stop using middleware to protect your routes"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/how-to-add-authorization-in-a-node-js-application-fdwxv5mum","name":"How to add authorization in a Node.js application"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/guide-to-web3-authorization-authentication-6hxwno24p","name":"Guide to Web3 authorization & authentication"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/protecting-apis-with-jwt-validation-tml67up1t","name":"Protecting APIs with JWT Validation"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/from-the-ground-up-podcast-reshaping-the-landscape-of-devops-through-innovative-authorization-solut-4bece5t26","name":"From the ground up podcast: Reshaping the landscape of DevOps through innovative authorization solutions"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/how-to-implement-relationship-based-access-control-rebac--dkaykx6jl","name":"How to Implement Relationship Based Access Control (ReBAC)"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Authorization","item":"https://daily.dev/tags/authorization"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/authorization/best-of"},{"@type":"ListItem","position":5,"name":"March 2024"}]}]} ```