objection-authorize
warrant-demo-app-ts
objection-authorize | warrant-demo-app-ts | |
---|---|---|
1 | 1 | |
75 | 4 | |
- | - | |
7.2 | 2.6 | |
over 1 year ago | about 1 year ago | |
JavaScript | JavaScript | |
GNU Lesser General Public License v3.0 only | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
objection-authorize
-
Casbin: An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js
Currently, I have managed to integrate casl into the objection ORM (see: plugin), but it’s kinda hard to wrap my head around casbin due to:
warrant-demo-app-ts
-
Launch YC S21: Meet the Batch, Thread #4
We’re Aditya and Karan, the co-founders of Warrant (https://warrant.dev/). We build APIs and infrastructure that helps developers implement authorization and access control in their apps.
Implementing flexible authorization that grows with your application is difficult. Many products only need authentication early on but eventually require authorization; however, adding complex authorization to a mature, high usage product is even harder. We’re building Warrant to better abstract the complexity of authorization and reduce implementation cost and maintenance drag for engineering teams.
Warrant abstracts your authorization rules and access control logic outside of your application so it isn’t coupled to core business logic. We adopted concepts from Google Zanzibar to make Warrant flexible enough to support any access control model. Authorization rules are easy to enforce in backend and frontend code at runtime through simple API calls. Both developers and non-technical users can modify access rules through our dashboard to change application behavior without needing to change code.
We’re taking a service-driven approach to authorization. As companies get bigger and build out multiple services, authorization logic needs to be re-implemented in the new services or some central service. Whether you’re a small startup with a monolith or a company with many microservices, we think decoupling your authorization and having a dedicated authorization service is the right approach. Check out our demo app (https://github.com/warrant-dev/warrant-demo-app-ts) for an end-to-end example of how to use Warrant.
What are some alternatives?
CASL - CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
Ory Keto - Open Source (Go) implementation of "Zanzibar: Google's Consistent, Global Authorization System". Ships gRPC, REST APIs, newSQL, and an easy and granular permission language. Supports ACL, RBAC, and other access models.
accesscontrol - Role and Attribute based Access Control for Node.js
Ory Oathkeeper - A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
node-casbin - An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
casbin-cpp - An authorization library that supports access control models like ACL, RBAC, ABAC in C/C++
orbit-db-access-controllers - Access Controllers for OrbitDB
awesome-authorization - A curated list of information and resources about authorization.
sapper-rbac - RBAC for Sapper
warrant-express-middleware - Expressjs Middleware for enforcing access control on API endpoints using the Warrant API
nestjs-objection - NestJS module for Objection
warrant - Warrant is a highly scalable, centralized authorization service based on Google Zanzibar, used for defining, querying, and auditing application authorization models and access control rules.