All geek questions in one place

Native RBAC library for NodeJS

we are looking for a suitable Nodejs library for role-based access control (RBAC).

We did some research on this and found that the most popular solution is this . This is an Access Control List module based on Redis with support for Express middleware. This library has excellent support and is very popular.

But at the same time, there is another solution .

This is the authorization of the provider, which is designed to work with the connection or express. I see that the last commit in this repo was made 1 year ago. So the support is not very good.

Which library would be better for handling roles and privileges in a complex application?

+12
source share
2 answers

First of all, one small clarification: RBAC and ACL are not two interchangeable terms. The link you are referring to is named after the ACL, but the differences are clearly described in this article by Karl Dune (see words in bold):

  • "An ACL or Access Control List is an access control implementation , usually presented as a privilege table."
  • "Role-based access control is an access control method in which users are assigned roles and roles determine what privileges they have."

, RBAC Node.js - easy-rbac, . RBAC, ( " ", node_acl):

, ; , .

+1

()? API . -, ( 1-2 , API YAML)

-, , JWT , : http://miguelduarte.pt/2017/04/19/using-jwt-authentication-with-swagger-and-node-js/

, , YAML, .

0

Source: https://habr.com/ru/post/1016352/

More articles:


All Articles