Cerbos version 0.11 is out!
V0.11 focuses on support for defining schemas for the contextual data that is required to evaluate policies. With the new schema support, policy authors can define JSON schemas for the principal and resource attributes required by each policy and receive helpful validation messages if a check is made without the full context required. See Schemas for more information.
For developers, the schema provides a level of confidence that the requests being made to the Cerbos instance are correctly formatted and populated. The Cerbos response will include schema validation errors encountered while processing the request, if any. When strict schema enforcement is enabled, requests will be implicitly denied - thus providing peace of mind that decisions are made using correct data points. You can find more about how to define a schema in the documentation.
Policy authors - be it product, security or other teams - can define a set of attributes upfront for use in the policy logic. This means that the condition logic can be safe in assuming that an attribute exists and it is of the correct type. This leads to more streamlined and succinct business logic rather than having to handle edge-cases around existence and types in expressions.
This release also includes preliminary support for OpenTelemetry, the high-quality, ubiquitous, and portable telemetry to enable effective observability.
.png)
