Edit

Tutorials

Some tutorials are for the Casbin's model and work for all Casbin implementations in different languages. Some other tutorials are language-specific.

Our Papers

• PML: An Interpreter-Based Access Control Policy Language for Web Services

This paper digs deeply into the design details about Casbin. Please cite the following BibTex if you use Casbin/PML as a reference in your paper:

@article{luo2019pml,
  title={PML: An Interpreter-Based Access Control Policy Language for Web Services},
  author={Luo, Yang and Shen, Qingni and Wu, Zhonghai},
  journal={arXiv preprint arXiv:1903.09756},
  year={2019}
}

• Access Control Policy Specification Language Based on Metamodel (in Chinese)

This is another longer-version paper published in Journal of Software. The citation is not available yet.

Videos

• A Secure Vault - implementing authorization middleware with Casbin - JuniorDevSG
• Sharing user permissions in a micro-service architecture based on Casbin (in Russian)
• Nest.js - Casbin RESTful RBAC authorization midleware

PERM Meta-Model (Policy, Effect, Request, Matchers)

• Modeling Authorization with PERM in Casbin
• Designing a Flexible Permissions System with Casbin
• Permission management with Casbin (in Chinese)
• Analysis of Casbin (in Chinese)
• Design of System Permissions (in Chinese)
• Casbin: A Permission Engine (in Chinese)
• Implementing ABAC with Casbin (in Chinese)
• Source code analysis of Casbin (in Chinese)

Go

Java

Node.js

PHP

Python

HTTP & RESTful

• Basic Role-Based HTTP Authorization in Go with Casbin (or Chinese translation)

Beego

• Using Casbin with Beego: 1. Get started and test (in Chinese)
• Using Casbin with Beego: 2. Policy storage (in Chinese)
• Using Casbin with Beego: 3. Policy query (in Chinese)
• Using Casbin with Beego: 4. Policy update (in Chinese)
• Using Casbin with Beego: 5. Policy update (continued) (in Chinese)

Gin

• Tutorial: Integrate Gin with Cabsin
• Policy enforcements on K8s with Pipeline
• Backend API with Go: 1. Authentication based on JWT (in Chinese)
• Backend API with Go: 2. Authorization based on Casbin (in Chinese)
• Using Go's authorization library Casbin with Gin and GORM (in Japanese)

Echo

• Web authorization with Casbin

Iris

• Iris + Casbin: Practice for permission management (in Chinese)
• Role-based access control for HTTP based on Casbin (in Chinese)
• Learning iris + Casbin from scratch

VMware Harbor

• Casbin: Golang access control framework (in Chinese)
• Access control in Harbor (in Chinese)

Argo CD

• Organizational RBAC in Argo CD with Casbin

GShark

• GShark: Scan for sensitive information in Github easily and effectively (in Chinese)

SprintBoot

• jCasbin: a more light-weight permission management solution (in Chinese)
• Integrating jCasbin with JFinal (in Chinese)

Express

• How to Add Role-Based-Access-Control to Your Serverless HTTP API on AWS

Nest

• How to Create Role based Authorization Middleware with Casbin and Nest.js
• nest.js: Casbin RESTful RBAC authorization middleware (Video)
• A Demo App of Attribute-based Access Control in Node.js Based on Casbin
• Multi tenant SaaS starter kit with cqrs graphql microservice architecture

• Casbin, Powerful and Efficient ACL for Your Projects

Laravel

• Laravel authorization: authorization library supporting ACL, RBAC, ABAC and other models