A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

⚔️ A modern, attribute-aware access control engine written in Rust. Supports RBAC, ABAC, ReBAC, PBAC, and fine-grained multi-tenant policies. Built to rival Keycloak's authorization module.

Java/Spring Boot SaaS backend starter with multi-tenancy, auth, access control, audit logging and file management.

This project provides a Policy Enforcement Point (PEP) SDK in Java that generates a XACML 3.0 authorization request and response in accordance with the JSON Profile of XACML 1.1.

RailsIAM is a database-driven Identity and Access Management solution for Rails applications. It provides JWT authentication, refresh tokens, RBAC, PBAC, endpoint-first authorization, role and user permissions, explicit denied permissions, authorization caching, and automatic resource authorization for API and traditional Rails applications.

Stop writing authorization logic. Start asking questions. OpenFGA high performance relationship-based access control for Laravel.

Policy Machine for Role Based Access Control

Stop writing authorization logic. Start asking questions. OpenFGA high performance relationship-based access control for PHP.

Access control and permission checks library based on actions and resource identification.

This repository is the entry point to start with Attribute Base Access Control (ABAC) and Policy-as-code from Axiomatics.

An authorization component that provides attribute-based access control in PHP.

StrongDM Zero Trust Sample Policies

Java/Spring Boot SaaS backend starter with multi-tenancy, auth, access control, audit logging and file management.

A helper library for implementing the permission/attribute based access control (ABAC) with JSON web tokens using the ASP.NET Core's policy-based access control (PBAC)

Policy-based authorization library

The open-source identity infrastructure for products and agents

🔐 Explore modern authorization models through documentation and interactive TypeScript Jupyter notebooks. This repository covers RBAC, ABAC, FGAC, PBAC, and ReBAC with practical examples, authorization flows, decision-making logic, security considerations, and real-world implementation concepts.

A user interface for Udaru

A secure user authentication system with JWT, implementing best practices for secure development, including RBAC, PBAC, session expiration, password encryption with BCrypt, simple audit logging, and Docker containerization as part of a Secure Development course project.