Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Is there a reason why it's required to have two separate ports on the same host for read/write when using Keto?

segregation of read / write operations (i would imagine at least :slightly_smiling_face: )

So. It solves one issue regarding security around permissions: having one port dedicated to reads and one port dedicated to writes would make locking down the writes trivial.

Ahhh that's understandable. For context, I'm working on a testcontainers module for myself as I find this simpler than using mocks (unless o can learn how to be better with mocking), so led to the question of exposing a single or two ports

<@U0661G1TQAJ> That's a great idea. It will be amazing if you can share the testcontainers example with keto!

Looking forward for it.

<@U06GB6KTU81> i can share (it's in Go for clarification), there seems to be an issue where the `/home/ory` doesn't seem to exist (I'm pulling from `oryd/keto:v0.11.1` )

Gist: <https://gist.github.com/adoublef/6ebfbd0bd6acfff2702bddca0e67de0b|https://gist.github.com/adoublef/6ebfbd0bd6acfff2702bddca0e67de0b>