go-attr-rbac

go-attr-rbac

A simple hybrid of ABAC & RBAC that delegates fine-graining to downstream services.

flowchart TB
    C(Client) --> G1 -- authenticate request --> A(Auth Service)
    
    subgraph Gateway
        direction TB
        G1(Auth)
        G2(RBAC) -- [ok] --> G3(Forward)
    end
    
    subgraph Protected
        direction TB
        S(Service) --> FG(Fine-grained ACL)
        FG --> R(Resource)
    end

    A -- [JWT with roles & attr] --> G2
    G2 --> Rejected
    G3 -- [JWT with roles & attr] --> S

Usage

Use as a program

Just clone/download the repo, build and run it.

Use as a library

Start with the main.go from this package and modify it to your needs. The bulk of stuff is in api/handlers, and the ent directory are database stuff as usual.

Migrations

It is deliberately left out migrations as the server do some database checking while starting up.