GraphQL authorization layer core
Validate a JWTs scope to authorize access to an endpoint
GraphQL Directive for graphql-authz
A Pothos plugin for applying GraphQL AuthZ rules to fields
Envelop plugin for graphql-authz
Nest.js RBAC & ABAC authorization module based on Node-Casbin
A comprehensive RBAC/ABAC/ReBAC authorization component for Convex with O(1) indexed lookups, inspired by Google Zanzibar
Apollo Server plugin for graphql-authz
YoAmigo SDK contains editable components, database, authentication, and authorization for yoamigo apps
Flow JS SDK Util -- Encode Key
Authorization module for Fonoster
A multi-tenant organization and team management component for Convex with built-in authorization via @djpanda/convex-authz
OPA authorization helper library
Aserto Node SDK
Authorization module for the @hz-9/a5-* series of repositories.
Simplest authentication & authorization module in NextJS
Add Keycloak auth to Graphback runtime applications
Agnostic runtime authorization for NestJS + Prisma: CASL scoping, signed inter-service JWTs, and snapshot-based permission propagation over NATS.
This tool works with a Keycloak Autorization token
<br /> <div align="center"> <img src="https://fronteggstuff.blob.core.windows.net/frongegg-logos/logo-transparent.png" alt="Frontegg Logo" width="400" height="90">
[PoC] Node Authz Client
Storage-agnostic roles, permissions, guards, and server authorization helpers
Substrate-agnostic authz primitives — Actor, Archetype, Capability, requireCapability. Used internally by @pleri/pylon and @pleri/pylon-cli; consumable by any MCP SDK or embedded authz layer that wants the same types without the runtime.
Secret provider for Auth0 on Fastify
Per-resource (relationship-based) authorization: a role lattice, default-deny enforcement, and the membership lifecycle (grant/revoke/transfer) — storage-agnostic, framework-agnostic.
Compile-time sqlx backend selection (Pool/DbBackend/DbConnection) shared by the arium engine and arium-authz.