Open Policy Agent for Bottle Web Framework

Reading Time: < 1 minute Recently, I’ve been playing around with Open Policy Agent (a.k.a. OPA), an open source project by CNCF that decouples policy enforcement from decision making. To practice its implementation, I created a proof of concept for Python’s Bottle framework, a simple web framework that doesn’t have Authorization by default, seemed like a good candidate for OPA! … Continue reading “Open Policy Agent for Bottle Web Framework”

Damn Vulnerable GraphQL Application

Reading Time: < 1 minute GraphQL has been a technology I’ve been focusing a lot on in my day job. GraphQL is a query language made by Facebook, and can be an alternative to REST. I have spent quite some time researching how to defend GraphQL properly. My journey into researching GraphQL included searching for a Damn Vulnerable version of … Continue reading “Damn Vulnerable GraphQL Application”