How to handle Permissions/roles with Golang web?

• mux

  85 17,948 2.6 Go

  Discontinued A powerful HTTP router and URL matcher for building Go web servers with 🦍

  

After authentication, i read the groups (azure ad) of the user via Graph API. The groups are mapped to internal roles and stored in a redis cluster. Key of the data in Redis is a Session-Id and the Id of the data (in this case sessionid + 'roles'). Each Microservice uses a small autorization function that is called before the desired functionality. This authorization function checks the redis data and either returns 401 or continues to the real handler. I am using https://github.com/gorilla/mux for handling http requests, but every other multiplexer library should be fine.

• gin-auth-example

  1 136 6.1 Go

  Example cookie-based authentication with Gin

I used this as template https://github.com/Depado/gin-auth-example/blob/master/main.go

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• biscuit-rust

  17 201 7.2 Rust

  Rust implementation of the Biscuit authorization token

  

• gorbac

  2 1,555 0.0 Go

  goRBAC provides a lightweight role-based access control (RBAC) implementation in Golang.

• chi

  101 17,050 7.2 Go

  lightweight, idiomatic and composable router for building Go HTTP services

  

Honestly the std lib net/http plus a router like Chi or gorilla/mux

• Iris

  14 24,857 9.0 Go

  The fastest HTTP/2 Go Web Framework. New, modern and easy to learn. Fast development with Code you control. Unbeatable cost-performance ratio :rocket:

• Echo

  122 28,466 8.0 Go

  High performance, minimalist Go web framework

  

If you like the expressjs-like API of Fiber then you might like Echo

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project