An authorization library that supports access control models like ACL, RBAC, ABAC in Node.JS

`@shefing/abac` adds a pluggable, Payload-native attribute-based access control layer.

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.JS

Advanced access control library (RBAC + ABAC + Context + Guards) for TypeScript applications.

Express.js integration for Autorix policy-based authorization (RBAC + ABAC)

Dynamic, database driven RBAC/ABAC for Next.js App Router. Shield your Server Components at runtime.

Framework-agnostic permission engine — RBAC, ABAC, plan gating, rate-limit config

> Phase 6 — Policy Engine. Centralized authorization: `can(request)` over composable RBAC / ABAC / ReBAC.

ReBAC (Relationship-Based Access Control) pour @mostajs — tuples de relations + réaccessibilité par graphe via le moteur Prolog de @mostajs/rules. Composable en attribut/PIP dans abac/pbac.

RBAC + ABAC hybrid authorization library for Angular (BFF + PKCE compatible)

Generate production-ready CRUD APIs from Drizzle schema with built-in RBAC, ABAC, and RLS.

A library for implementing an attribute-based access control scheme.

Unified access control for React & Node.js — RBAC, ABAC, feature flags, A/B experiments, plan gating, policy engine, remote config. Works with Next.js, Express, Fastify. SSR-safe, tree-shakeable, zero dependencies. One hook, one component.

Type-safe ABAC library with zero runtime dependencies.

Config-driven RBAC and multitenancy for CogitX experiences — roles, permissions, wildcards, ABAC conditions, and tenant isolation over the ExperienceUser identity, with optional React bindings.

DevTools overlay for react-access-engine — inspect RBAC, ABAC, feature flags, A/B experiments, policies, and access decisions in real time. Zero-config debug panel for React.

Shared ABAC policy types, context injection/extraction, and evaluator for the Apero VN MCP gateway ecosystem

Flexible RBAC + ABAC authorization layer for Auth.js (NextAuth v5)

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.JS

Drop-in Identity & Access Management for Node/Postgres apps: authentication (sessions + tokens), RBAC, scopes/ABAC, external providers, SCIM, and an OAuth2 authorization server. Owns its own `forgeguard` Postgres schema and migrations.