expressjs.com icon indicating copy to clipboard operation
expressjs.com copied to clipboard

Add the casbin-express-authz middleware to provide better authorization

Open hsluoyz opened this issue 5 years ago • 2 comments

Hi,

We developed an authorization (authz) middleware for Expresss called casbin-express-authz (https://github.com/node-casbin/express-authz) based on Casbin (https://casbin.org/), a cross-language authorization library project. For Node.js, our main library: https://github.com/casbin/node-casbin got certain popularity.

Casbin supports many access control models like ACL, RBAC, ABAC. The policy rules can be persisted into many databases like MySQL, PostgreSQL, SQLite, Microsoft SQL Server. It's very flexible and powerful. I think it will serve the authorization need for Express users.

I noticed there is already a 3rd-party middleware called express-stormpath doing the similar thing. But it has limited functionalities (only supports Group-based Access Control). Moreover, after stormpath is acquired, the project seems no longer active. So I believe it's necessary to provide a better and up-to-date authorization middleware.

Therefore, is it OK to add casbin-express-authz to the middleware list: https://expressjs.com/en/resources/middleware.html ? Thanks.

hsluoyz avatar Sep 18 '18 15:09 hsluoyz

Let's defer this until #988 is resolved.

crandmck avatar Oct 29 '18 06:10 crandmck

Any update on this issue?

hsluoyz avatar May 17 '20 08:05 hsluoyz