# \#authorization **URL:** https://forum.elixirforum.com/tag/authorization/432.md [Latest](https://forum.elixirforum.com/latest.md) · [Categories](https://forum.elixirforum.com/categories.md) · [Tags](https://forum.elixirforum.com/tags.md) --- ## [Assent - Multi-provider framework for Elixir](https://forum.elixirforum.com/t/assent-multi-provider-framework-for-elixir/25873)
**Author:** [@danschultzer](https://forum.elixirforum.com/u/danschultzer)\ **Replies:** 5\ **Last updated:** [November 8, 2026, 8:00am UTC](https://forum.elixirforum.com/t/assent-multi-provider-framework-for-elixir/25873 "2026-11-08T08:00:22Z")
I’ve moved the strategies out of PowAssent and created a multi-provider framework for Elixir. This way the strategies can be used in any context, and not be limited to Pow, Phoenix, Plug, etc. Please don’t hesitate with… --- ## [LetMe - authorization DSL](https://forum.elixirforum.com/t/letme-authorization-dsl/51595)
**Author:** [@woylie](https://forum.elixirforum.com/u/woylie)\ **Replies:** 9\ **Last updated:** [May 27, 2026, 5:40am UTC](https://forum.elixirforum.com/t/letme-authorization-dsl/51595 "2026-05-27T05:40:10Z")
I just released LetMe 1.0, marking the first stable release. LetMe (hex) LetMe (Github) LetMe is an authorization DSL with introspection capabilities. Why? There are plenty of authorization libraries, but when an app… --- ## [Pow - Robust, modular, extendable user authentication and management system](https://forum.elixirforum.com/t/pow-robust-modular-extendable-user-authentication-and-management-system/15807)
**Author:** [@danschultzer](https://forum.elixirforum.com/u/danschultzer)\ **Replies:** 241\ **Last updated:** [May 6, 2026, 9:24am UTC](https://forum.elixirforum.com/t/pow-robust-modular-extendable-user-authentication-and-management-system/15807 "2026-05-06T09:24:13Z")
None of the current solutions worked well for me, so I went ahead and built a user management system from scratch. This project took far longer than I initially thought, and I would love to get some help to iron out eve… --- ## [Implementing Multi-Tenancy in Phoenix 1.8 - Single vs Multi-Organization Approaches](https://forum.elixirforum.com/t/implementing-multi-tenancy-in-phoenix-1-8-single-vs-multi-organization-approaches/70301)
**Author:** [@e.fu](https://forum.elixirforum.com/u/e.fu)\ **Replies:** 3\ **Last updated:** [January 31, 2026, 2:06am UTC](https://forum.elixirforum.com/t/implementing-multi-tenancy-in-phoenix-1-8-single-vs-multi-organization-approaches/70301 "2026-01-31T02:06:39Z")
\[Guide\] Implementing Multi-Tenancy in Phoenix 1.8 - Single vs Multi-Organization Approaches Hello Elixir Community! I’m excited to share a comprehensive resource I’ve put together on implementing multi-tenant applicatio… --- ## [Permit.Phoenix 0.4 - LiveView authorization video tutorial](https://forum.elixirforum.com/t/permit-phoenix-0-4-liveview-authorization-video-tutorial/74100)
**Author:** [@vincentvanbush](https://forum.elixirforum.com/u/vincentvanbush)\ **Replies:** 0\ **Last updated:** [January 27, 2026, 5:08pm UTC](https://forum.elixirforum.com/t/permit-phoenix-0-4-liveview-authorization-video-tutorial/74100 "2026-01-27T17:08:52Z")
Permit.Phoenix - tutorial for LiveView Hey! We’ve recently released Permit.Phoenix 0.4 - with several quality-of-life improvements and new sane defaults in: Scopes usage Authorization error handling Action singularity/… --- ## [Scopes with custom authorization](https://forum.elixirforum.com/t/scopes-with-custom-authorization/73510)
**Author:** [@ppetrov](https://forum.elixirforum.com/u/ppetrov)\ **Replies:** 2\ **Last updated:** [December 2, 2025, 2:58pm UTC](https://forum.elixirforum.com/t/scopes-with-custom-authorization/73510 "2025-12-02T14:58:06Z")
Hello guys, I am looking for an advise here. I am trying to build a system which will be tenant application with organizations and users. Under each organization there will be a dossier for a visitor/patient. Under it t… --- ## [Missing \`Scope\` in \`phx.gen.auth\` docs](https://forum.elixirforum.com/t/missing-scope-in-phx-gen-auth-docs/73007)
**Author:** [@plumdot](https://forum.elixirforum.com/u/plumdot)\ **Replies:** 2\ **Last updated:** [October 22, 2025, 10:18am UTC](https://forum.elixirforum.com/t/missing-scope-in-phx-gen-auth-docs/73007 "2025-10-22T10:18:29Z")
Hi everyone. I am following along the Phoenix docs for auth. When discussing Scopes, we’re supposed to have a lib/my\_app/accounts/scope.ex file, but I can’t seem to generate one. Is this expected? The generated code i… --- ## [Authorization & Access Control with Permit - ElixirConf EU 2025 presentation transcript](https://forum.elixirforum.com/t/authorization-access-control-with-permit-elixirconf-eu-2025-presentation-transcript/72807)
**Author:** [@vincentvanbush](https://forum.elixirforum.com/u/vincentvanbush)\ **Replies:** 0\ **Last updated:** [October 7, 2025, 7:04pm UTC](https://forum.elixirforum.com/t/authorization-access-control-with-permit-elixirconf-eu-2025-presentation-transcript/72807 "2025-10-07T19:04:06Z")
In ElixirConf EU 2025, I spoke about our Permit library as a comprehensive authorization and access control solution in projects relying on Ecto, Phoenix, LiveView, and even Absinthe - or none of these at all. Now I’ve … --- ## [How to approach Authentication and Authorization in Hologram](https://forum.elixirforum.com/t/how-to-approach-authentication-and-authorization-in-hologram/72527)
**Author:** [@sreyansjain](https://forum.elixirforum.com/u/sreyansjain)\ **Replies:** 1\ **Last updated:** [September 22, 2025, 2:00pm UTC](https://forum.elixirforum.com/t/how-to-approach-authentication-and-authorization-in-hologram/72527 "2025-09-22T14:00:16Z")
Since Hologram is getting production ready, and Authentication and Authorization is a crucial step in making production apps, let’s discuss how to approach authentication and authorization in Hologram. We can create a l… --- ## [Authorization & Access Control: Case Studies and Practical Solutions using Elixir - Michał Buszkiew](https://forum.elixirforum.com/t/authorization-access-control-case-studies-and-practical-solutions-using-elixir-michal-buszkiew/72430)
**Author:** [@CodeSync](https://forum.elixirforum.com/u/CodeSync)\ **Replies:** 0\ **Last updated:** [September 9, 2025, 1:00pm UTC](https://forum.elixirforum.com/t/authorization-access-control-case-studies-and-practical-solutions-using-elixir-michal-buszkiew/72430 "2025-09-09T13:00:03Z")
Authorization & Access Control: Case Studies and Practical Solutions using Elixir - Michał Buszkiew Comments welcome! View the code-sync tag for more Code Sync talks! --- ## [Contextual authorization for "collection" operations](https://forum.elixirforum.com/t/contextual-authorization-for-collection-operations/67003)
**Author:** [@binarypaladin](https://forum.elixirforum.com/u/binarypaladin)\ **Replies:** 8\ **Last updated:** [July 29, 2025, 4:24pm UTC](https://forum.elixirforum.com/t/contextual-authorization-for-collection-operations/67003 "2025-07-29T16:24:41Z")
So, in my quest to convert an existing system (slowly) over to Ash, I’m trying to figure out how to replicate certain patterns in the system. For reading a single resource or updating, the Ash flow is pretty obvious wit… --- ## [Permit - an authorization library for Phoenix, LiveView and Ecto](https://forum.elixirforum.com/t/permit-an-authorization-library-for-phoenix-liveview-and-ecto/58909)
**Author:** [@vincentvanbush](https://forum.elixirforum.com/u/vincentvanbush)\ **Replies:** 11\ **Last updated:** [July 2, 2025, 9:22am UTC](https://forum.elixirforum.com/t/permit-an-authorization-library-for-phoenix-liveview-and-ecto/58909 "2025-07-02T09:22:04Z")
Hello! We’ve released Permit - a new open-source project at Curiosum aiming to make it easier to manage permission-based access control in Elixir applications, supporting Ecto, Phoenix and LiveView. Permit exposes a mos… --- ## [Unable to get the URI for a LiveView on\_mount authorization hook](https://forum.elixirforum.com/t/unable-to-get-the-uri-for-a-liveview-on-mount-authorization-hook/70953)
**Author:** [@RobertoSchneiders](https://forum.elixirforum.com/u/RobertoSchneiders)\ **Replies:** 6\ **Last updated:** [May 20, 2025, 11:51pm UTC](https://forum.elixirforum.com/t/unable-to-get-the-uri-for-a-liveview-on-mount-authorization-hook/70953 "2025-05-20T23:51:43Z")
I’m trying to get a centralized authentication/authorization system working by using the LiveView on\_mount hook, not the handle\_params. This app has pages with different levels of authorization: public: can be accesse… --- ## [How to best integrate an external API?](https://forum.elixirforum.com/t/how-to-best-integrate-an-external-api/70281)
**Author:** [@Raathmd](https://forum.elixirforum.com/u/Raathmd)\ **Replies:** 2\ **Last updated:** [April 2, 2025, 7:52pm UTC](https://forum.elixirforum.com/t/how-to-best-integrate-an-external-api/70281 "2025-04-02T19:52:14Z")
I have an api to a logistics system where customers of the transport company can create a quote for delivery of goods. I will develop a web app, where the quote will start as a quote request saved in a postgres databa… --- ## [How to handle routes controlled by user permissions in LiveView](https://forum.elixirforum.com/t/how-to-handle-routes-controlled-by-user-permissions-in-liveview/67787)
**Author:** [@Adzz](https://forum.elixirforum.com/u/Adzz)\ **Replies:** 6\ **Last updated:** [December 3, 2024, 11:18am UTC](https://forum.elixirforum.com/t/how-to-handle-routes-controlled-by-user-permissions-in-liveview/67787 "2024-12-03T11:18:42Z")
I have an app where users have different permissions. Those permissions are used to determine whether a user can see a page. Each route has one or more permissions associated with it, for dead views it’s easy enough to d… --- ## [How to make single login in phoenix framework?](https://forum.elixirforum.com/t/how-to-make-single-login-in-phoenix-framework/67189)
**Author:** [@ariandanim](https://forum.elixirforum.com/u/ariandanim)\ **Replies:** 11\ **Last updated:** [November 5, 2024, 7:55pm UTC](https://forum.elixirforum.com/t/how-to-make-single-login-in-phoenix-framework/67189 "2024-11-05T19:55:26Z")
Dear all, I would like to make my SAAS aplication using only single login for every user email, I mean when they try to access using same email in another pc/laptop/mac they unable make it happen, it means like this sce… --- ## [Authorizer Policies: Whats the difference....?](https://forum.elixirforum.com/t/authorizer-policies-whats-the-difference/67102)
**Author:** [@MartinVolerich](https://forum.elixirforum.com/u/MartinVolerich)\ **Replies:** 2\ **Last updated:** [October 29, 2024, 5:48pm UTC](https://forum.elixirforum.com/t/authorizer-policies-whats-the-difference/67102 "2024-10-29T17:48:54Z")
What’s the difference between a simple policy on a resource that is: policy action\_type(:create) do description "Only admins can create surveys" authorize\_if actor\_attribute\_equals(:admin?, true) forbid\_if always(… --- ## [Zephyr - Elixir authorization system based on the ReBAC model inspired by Google's Zanzibar](https://forum.elixirforum.com/t/zephyr-elixir-authorization-system-based-on-the-rebac-model-inspired-by-googles-zanzibar/65460)
**Author:** [@dgigafox](https://forum.elixirforum.com/u/dgigafox)\ **Replies:** 5\ **Last updated:** [September 24, 2024, 2:47am UTC](https://forum.elixirforum.com/t/zephyr-elixir-authorization-system-based-on-the-rebac-model-inspired-by-googles-zanzibar/65460 "2024-09-24T02:47:20Z")
Hello, everyone! I’m thrilled to introduce Zephyr, an open-source authorization library for Elixir that leverages the power of Relationship-based Access Control (ReBAC). Zephyr is inspired by Google’s Zanzibar and close… --- ## [How to scope resources to user?](https://forum.elixirforum.com/t/how-to-scope-resources-to-user/65750)
**Author:** [@ab81](https://forum.elixirforum.com/u/ab81)\ **Replies:** 3\ **Last updated:** [August 29, 2024, 5:42pm UTC](https://forum.elixirforum.com/t/how-to-scope-resources-to-user/65750 "2024-08-29T17:42:08Z")
I have implemented user handling with the built-in phx.gen.auth solution and now created a resource that is in one-to-many relationship to the users (i.e. one user may have one or more resources). What would be the most… --- ## [Where is the best place to put the permissions checking logic in LiveView?](https://forum.elixirforum.com/t/where-is-the-best-place-to-put-the-permissions-checking-logic-in-liveview/54438)
**Author:** [@smahi](https://forum.elixirforum.com/u/smahi)\ **Replies:** 25\ **Last updated:** [August 12, 2024, 5:44pm UTC](https://forum.elixirforum.com/t/where-is-the-best-place-to-put-the-permissions-checking-logic-in-liveview/54438 "2024-08-12T17:44:02Z")
Hi, What is the best place to put the permissions checking logic in LiveView? Is there a central place where I can put the permission checking logic similar to Plug for controller actions? --- ## [Ash Policies - How To Check Permission From DB?](https://forum.elixirforum.com/t/ash-policies-how-to-check-permission-from-db/63952)
**Author:** [@kamaroly](https://forum.elixirforum.com/u/kamaroly)\ **Replies:** 4\ **Last updated:** [June 3, 2024, 3:53pm UTC](https://forum.elixirforum.com/t/ash-policies-how-to-check-permission-from-db/63952 "2024-06-03T15:53:02Z")
I’m working on authorization, and I’m looking to implement Ash Policies. My authorization system consists of three main resources: User Permission with primary attributes (name, resource) UserPermission My setup invol… --- ## [Are there any tutorials for working with keycloak and Absinthe?](https://forum.elixirforum.com/t/are-there-any-tutorials-for-working-with-keycloak-and-absinthe/42243)
**Author:** [@RafalKostecki](https://forum.elixirforum.com/u/RafalKostecki)\ **Replies:** 1\ **Last updated:** [March 16, 2024, 2:42pm UTC](https://forum.elixirforum.com/t/are-there-any-tutorials-for-working-with-keycloak-and-absinthe/42243 "2024-03-16T14:42:23Z")
Hello guys! I’m wondering if there is any tutorial/ready connector for working with keycloak and Absinthe. I will be grateful for any help. I found only pure elixir connector but it seems to not be supported anymore. --- ## [Users restriction and authorization in Phoenix 1.7.11](https://forum.elixirforum.com/t/users-restriction-and-authorization-in-phoenix-1-7-11/61831)
**Author:** [@ariandanim](https://forum.elixirforum.com/u/ariandanim)\ **Replies:** 2\ **Last updated:** [February 23, 2024, 11:45am UTC](https://forum.elixirforum.com/t/users-restriction-and-authorization-in-phoenix-1-7-11/61831 "2024-02-23T11:45:13Z")
How to make my page is only available for user member not the guest? I have 5 pages Home Products Pricing About Reseller I mean for page Reseller is only for registered user not for guests I’ve used this guides belo… --- ## [Passing token on websocket connection not as query param](https://forum.elixirforum.com/t/passing-token-on-websocket-connection-not-as-query-param/42706)
**Author:** [@francesco.pessina](https://forum.elixirforum.com/u/francesco.pessina)\ **Replies:** 6\ **Last updated:** [December 1, 2023, 5:06pm UTC](https://forum.elixirforum.com/t/passing-token-on-websocket-connection-not-as-query-param/42706 "2023-12-01T17:06:43Z")
Hello everyone :slight\_smile: We are experiencing a weird problem with Phoenix Websockets. We are exposing an authenticated channel. The authentication is made getting the token from the token parameter given during th… --- ## [Authorisation library alternative to canary?](https://forum.elixirforum.com/t/authorisation-library-alternative-to-canary/58899)
**Author:** [@marcin](https://forum.elixirforum.com/u/marcin)\ **Replies:** 2\ **Last updated:** [October 11, 2023, 4:48pm UTC](https://forum.elixirforum.com/t/authorisation-library-alternative-to-canary/58899 "2023-10-11T16:48:19Z")
Hi! I started using canary for loading and authorising records but it seems the project is left unmaintained. I also get random compile problems with it. After a short search for an alternative, I do not see anything … --- ## [Auth using Phoenix API with React Native frontend in a separate code base](https://forum.elixirforum.com/t/auth-using-phoenix-api-with-react-native-frontend-in-a-separate-code-base/58793)
**Author:** [@MDodge](https://forum.elixirforum.com/u/MDodge)\ **Replies:** 3\ **Last updated:** [October 9, 2023, 12:37pm UTC](https://forum.elixirforum.com/t/auth-using-phoenix-api-with-react-native-frontend-in-a-separate-code-base/58793 "2023-10-09T12:37:08Z")
Hey all, I’m writing an app using Phoenix as an API and I have a separate codebase for React Native. I’m researching the best way to handle Auth in this scenario. I’ve been looking around quite a bit and I’m coming up … --- ## [Why is the passed block being evaluated even when an exception is raised?](https://forum.elixirforum.com/t/why-is-the-passed-block-being-evaluated-even-when-an-exception-is-raised/58635)
**Author:** [@budgie](https://forum.elixirforum.com/u/budgie)\ **Replies:** 4\ **Last updated:** [October 2, 2023, 6:07pm UTC](https://forum.elixirforum.com/t/why-is-the-passed-block-being-evaluated-even-when-an-exception-is-raised/58635 "2023-10-02T18:07:33Z")
I have this function and the exception is being raised as expected. However, the block is still being evaluated even though the conditional returns false. What is happening here? def authorize\_role!(from, to, required… --- ## [Role-based and Access-based Authorization in Phoenix controller](https://forum.elixirforum.com/t/role-based-and-access-based-authorization-in-phoenix-controller/56721)
**Author:** [@alichoopani](https://forum.elixirforum.com/u/alichoopani)\ **Replies:** 2\ **Last updated:** [June 27, 2023, 2:02pm UTC](https://forum.elixirforum.com/t/role-based-and-access-based-authorization-in-phoenix-controller/56721 "2023-06-27T14:02:08Z")
I am currently working on an Elixir application and I would like to implement role-based and access-based authorization. In Spring Security, there is a convenient syntax using the @PreAuthorize annotation. However, I cou… --- ## [Noob pointers for resource authorization](https://forum.elixirforum.com/t/noob-pointers-for-resource-authorization/55900)
**Author:** [@raulrpearson](https://forum.elixirforum.com/u/raulrpearson)\ **Replies:** 6\ **Last updated:** [May 18, 2023, 3:58pm UTC](https://forum.elixirforum.com/t/noob-pointers-for-resource-authorization/55900 "2023-05-18T15:58:49Z")
I’m trying to learn Elixir/Phoenix and I’m struggling to understand how to create a resource that would belong to a user and should only be accessible to them. For example, in a task management app, users could create ta… --- ## [Elixir and ABAC architecture / XACML](https://forum.elixirforum.com/t/elixir-and-abac-architecture-xacml/51358)
**Author:** [@xgeek116](https://forum.elixirforum.com/u/xgeek116)\ **Replies:** 6\ **Last updated:** [March 24, 2023, 5:12am UTC](https://forum.elixirforum.com/t/elixir-and-abac-architecture-xacml/51358 "2023-03-24T05:12:58Z")
Hello, Does anyone already created or used an ABAC solution / architecture in the elixir world ? a syste based on attributes and policies. The idea is to create a system (based on microservices) to support Policy : cre… [Next page](https://forum.elixirforum.com/tag/authorization/432.md?match_all_tags=true&page=1&tags%5B%5D=authorization)