A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

Web-based model & policy editor for Casbin

⚔️ A modern, attribute-aware access control engine written in Rust. Supports RBAC, ABAC, ReBAC, PBAC, and fine-grained multi-tenant policies. Built to rival Keycloak's authorization module.

This project provides a Policy Enforcement Point (PEP) SDK in Java that generates a XACML 3.0 authorization request and response in accordance with the JSON Profile of XACML 1.1.

Stop writing authorization logic. Start asking questions. OpenFGA high performance relationship-based access control for Laravel.

Policy Machine for Role Based Access Control

Access control and permission checks library based on actions and resource identification.

Stop writing authorization logic. Start asking questions. OpenFGA high performance relationship-based access control for PHP.

Production-grade, multi-tenant SaaS backend platform built with Java 21 & Spring Boot 3.5+. Includes RBAC/PBAC, JWT security, audit logging, real-time notifications, file management, and fully documented REST API.

An authorization component that provides attribute-based access control in PHP.

This repository is the entry point to start with Attribute Base Access Control (ABAC) and Policy-as-code from Axiomatics.

StrongDM Zero Trust Sample Policies

An open-source LLM gateway that enforces policies, rate limits, and spend caps on every request—without changing your code.

A production-grade React authorization framework for RBAC, PBAC, ABAC, feature flags, and async permission checks

A helper library for implementing the permission/attribute based access control (ABAC) with JSON web tokens using the ASP.NET Core's policy-based access control (PBAC)

A user interface for Udaru

A secure user authentication system with JWT, implementing best practices for secure development, including RBAC, PBAC, session expiration, password encryption with BCrypt, simple audit logging, and Docker containerization as part of a Secure Development course project.

Production-ready IAM system built with FastAPI — JWT auth, Magic Links, TOTP/MFA, WebAuthn/Passkeys, OAuth 2.0 Social Login, and a built-in OIDC Provider. Multi-tenant with fine-grained PBAC. Powers multiple apps from a single identity layer.

ERP grade authorization demo using Hono + PostgreSQL

Cinebook (Backend APIs): A platform for all cineplex to sell tickets online

API powering Calingo’s platform for regional expression translation, with JWT and RBAC security.

A Naive Tensorflow Implementation of "Phase-Based Active Contour" Model (PBAC)

A simple library for role-based and permission-based access control with ZIO-http

[READ-ONLY] An authorization library for Aphiria