Safeguard your Phoenix -Authentication & Really Granular Authoriza

There are a few helpful tutorials demonstrating authentication & authorization alongside Phoenix. Let’s cover similar ground putting real emphasis on the distinction between authentication & authorization and how the two interact. Then let’s see how we can approach really granular authorization: restricting clients to just a selection of resources for which they have permission. E.g. if a collection of posts resides under the post/ path then how do we restrict clients to just the selection of ids under something like post/:id by people in their contact list? In the process we’ll be visiting Plug and Guardian (the JWT library). Joseph Yiasemides: I’m a British software engineer, currently based in Kraków, where I build & test servers in Erlang/OTP and Elixir. Since I joined Erlang Solutions, I’ve worked alongside great colleagues & clients, on projects involving HTTP APIs, TURN/STUN, XMPP, and AMQP.