loopbackio/loopback-next

Features

• Dependency Injection Containers - Maps unique keys to classes or factory functions to decouple component creation from usage.
• Dependency Injection - Decouples class construction from behavior by resolving dependencies through a central global registry.
• REST API Implementations - Provides a comprehensive framework for implementing server-side RESTful endpoints with standard CRUD semantics.
• Server-Side REST API Frameworks - Provides a comprehensive server-side framework for building RESTful APIs with standard CRUD semantics.
• Repository Patterns - Abstracts database logic through a repository layer to decouple business logic from persistent storage implementations.
• Data Schema Management - Provides tools for defining and modifying object schemas to automate API and JSON schema creation.
• Relational Record Fetching - Enables the retrieval of nested resources and associated model instances through referential links.
• External Data Connectors - Provides a standardized connector system to interface with various external database systems.
• Model-to-Source Routing - Maps specific data models to database connections to support multi-database architectures.
• Relational Data Modeling - Allows defining complex model relationships, including many-to-one associations using foreign key constraints.
• Repository Pattern Abstractions - Abstracts data access logic into repository interfaces to decouple the domain from persistence details.
• API Access Security - Secures API endpoints by controlling method execution based on user roles and scopes.
• API Security Management - Provides comprehensive tools for managing access control, identities, and permissions specifically for API resources.
• Conditional Access Evaluators - Evaluates dynamic authorization votes and applies precedence rules to determine request access.
• Route-Level Authentication Overrides - Allows configuration of authentication behavior through global defaults and request-level overrides for specific routes.
• Global Access Policies - Executes authorization functions on every decorated endpoint to enforce system-wide access criteria.
• Authentication Strategies - Provides a pluggable system of interchangeable authentication strategies to support diverse user identity verification flows.
• User Identity Verification - Verifies user identities using a set of pluggable authentication strategies.
• Credential Validation - Executes authentication strategies to validate credentials and attach user profiles to the request.
• Application Access Rules - Defines access rules as configurations to determine if a user is permitted to perform an action.
• Method-Level Permissions - Runs voter functions on a per-method basis to determine if a user can perform a specific action.
• Permission-Based Access Control - Enforces access control by checking specific permission properties defined on user models.
• Runtime Authorization Enforcements - Actively blocks or allows requests by checking permissions against custom authorizer functions at runtime.
• Role-Based Access Control - Restricts application actions based on assigned user roles and vote-based authorization logic.
• Role-Based Access Control Systems - Implements a security layer that manages user permissions and enforces endpoint access based on defined roles.
• User Role Assignments - Associates user identity data with specific scopes and roles to determine appropriate access levels.
• Authorization Voters - Implements authorizer functions and voters to resolve conflicting access rights and define custom policies.
• Authentication Strategy Registries - Registers multiple identity verification methods through a standardized interface to support various login flows.
• JWT Authentications - Issues and verifies signed JSON Web Tokens to maintain secure user sessions.
• User Authentications - Manages user identity and verifies credentials using multiple authentication adapters to secure resources.
• User Profile Retrieval - Provides access to the authenticated user's profile via dependency injection within the request context.
• Application Bootstrapping - Coordinates the startup of components, servers, and bindings to establish the application runtime environment.
• Data Access Layers - Provides an abstraction layer that standardizes communication between application logic and various backend data sources.
• Database Abstraction Layers - Implements a repository pattern to decouple business logic from specific database implementations.
• Dependency Bindings - Registers specific classes or providers to a central context to control component injection.
• Dependency-Injected Contexts - Provides mechanisms for resolving dependencies at runtime using a hierarchy of global and request-scoped bindings.
• Bi-Directional Specification Mapping - Enables automatic generation of OpenAPI specifications from code and the production of controllers from existing specifications.
• Request-Scoped Configurations - Allows defining whether components are shared as singletons or created uniquely for each execution request.
• Node.js Server Frameworks - Acts as a specialized architectural framework for building Node.js server applications with multi-protocol support.
• Real-Time WebSocket Servers - Integrates real-time WebSocket endpoints to enable bidirectional data exchange between clients and the server.
• Data Model File Generation - Automatically generates application model files by inspecting existing relational database tables.
• Dynamic Connection Switching - Supports swapping active database connections at runtime based on the request context.
• Audit Logs - Maintains audit logs of executed database transactions for compliance and security monitoring.
• Audit Trails - Implements detailed audit trails that record every creation, edit, and deletion performed on data.
• Soft Deletion - Implements status-flag based deletion patterns to mark records as deleted without physical removal.
• Application Scaffolding - Provides CLI tools to generate the initial directory structure and boilerplate code for new API projects.
• Modular Feature Extensions - Enables grouping services and bindings into modular packages that plug into the application to add business functionality.
• Local Project Structure Generators - Generates the initial application folder structure and essential files to start development.
• Project Bootstrapping Templates - Generates project structures and configuration files from templates to accelerate initial setup.
• REST API Integrations - Implements integration logic for communicating with remote services via RESTful HTTP endpoints.
• API Orchestration Gateways - Integrates external REST and SOAP services into a single unified API surface for easier consumption.
• API Transport Abstractions - Maps a single API design across multiple transport protocols, including REST, gRPC, and WebSockets.
• Model-to-Schema Generation - Transforms application classes and models into JSON Schema definitions using reflection and metadata.
• Request Parameter Parsing - Extracts data from URL paths, query strings, and JSON objects to populate controller method arguments.
• REST Endpoint Protections - Provides the ability to validate user identities and restrict access to specific REST endpoints using pluggable authentication strategies.
• Secret Management Integrations - Integrates with external secret management systems to securely store and retrieve sensitive credentials.
• API Logic Generators - Creates controllers, models, and services using guided prompts to build application logic quickly.
• Convention-Based Configuration - Automatically discovers and binds controllers and models into the application context based on directory and file naming patterns.
• Runtime Value Resolvers - Calculates binding values at runtime using factory functions that access the current execution context.
• Application Mounts - Allows mounting secondary sub-applications into a main host application at specific URL paths.
• Method Interception Proxies - Implements dynamic proxy systems to run custom logic before or after class methods for cross-cutting concerns.
• Modular Application Composition - Implements architectural patterns for mounting independent functional sub-applications into a core host system.
• Code from Specification Generators - Produces implementation controllers and models directly from OpenAPI specifications to ensure design compliance.
• Repository Layer Filtering - Applies asynchronous logic to filter datasets at the repository layer before they reach the controller.
• Request Interception Middleware - Implements architectural patterns to run custom logic before or after class methods for authorization and error handling.
• Reusable Component Architectures - Supports the creation of standardized, independent software modules that can be reused across different projects.
• API Schema Validators - Automatically verifies endpoints and schemas to ensure consistency across development teams.
• Controller-Based Endpoints - Defines business-logic controllers to handle incoming HTTP requests and return structured responses.
• API Schema Endpoints - Specifies API endpoints and schemas in a standard format to serve as the single source of truth for the application.
• Authentication Middleware - Connects external authentication middleware and OAuth strategies to validate user identities.
• Artifact Auto-Discovery - Automatically scans project directories for controllers and models to bind them into the application context.
• Error Response Mappers - Translates internal application errors into standardized HTTP responses to protect sensitive system details.
• External API Integrations - Integrates external REST and SOAP services into the application to fetch and exchange remote data.
• External Service Integrations - Integrates external REST APIs, SOAP services, and cloud storage to bridge remote data into the application workflow.
• HTTP Request and Response Handlers - Injects raw HTTP request and response objects into controllers to allow precise manipulation of the request lifecycle.
• Real-Time Communication - Exposes WebSocket endpoints to enable bidirectional, real-time data exchange between clients and the server.
• OpenAPI Specification Generators - Automatically derives machine-readable OpenAPI specifications from application code to generate documentation.
• Spec-Driven Implementations - Automatically produces implementation controllers and models directly from OpenAPI specifications to ensure design alignment.
• Web Frameworks - Powerful framework for creating REST APIs and connecting data sources.

Star history