nestjsx/nest-access-control
Nest Access Control
NestJS Access Control is a role-based and attribute-based authorization framework designed for the NestJS ecosystem. It provides a declarative system for securing application routes and resources, allowing developers to enforce granular access policies through metadata-driven decorators.
The framework distinguishes itself by supporting hierarchical role inheritance, which enables the resolution of complex permission sets by traversing parent and child role relationships. It also facilitates dynamic authorization management, allowing security rules to be loaded asynchronously from external data sources during the application bootstrap phase to ensure policies remain current.
Beyond basic route protection, the library offers attribute-level filtering to restrict read or write operations on specific resource properties. It integrates directly with the dependency injection container and the request lifecycle, providing tools to extract user identity and role information from incoming requests for both automated enforcement and manual, context-aware permission checks.
Features
- Role-Based Access Control - Implements granular role-based access control systems for NestJS applications.
- Attribute-Based Access Control - Enables granular data access control by restricting operations on specific fields using attribute-based policies.
- API Endpoint Guarding - Protects API endpoints using declarative decorators to validate user permissions and resource ownership.
- Role Inheritance Resolution - Resolves complex permission sets by traversing hierarchical parent and child role relationships.
- Role-Based Access Control Systems - Enforces granular access policies across application endpoints using a hierarchical role-based system.
- Route-Level Access Guards - Secures application endpoints using declarative decorators to enforce role and action-based access restrictions.
- Authorization Modules - Provides a role and attribute-based authorization framework for the NestJS ecosystem.
- Attribute Filtering - Restricts read or write operations on specific resource properties using attribute-level filtering.
- Authorization Rule Loaders - Supports asynchronous loading of authorization rules from external services during application startup.
- Dynamic Rule Management - Supports dynamic management of security rules loaded from external services.
- Authorization Middleware - Provides declarative middleware for validating user roles and resource ownership in TypeScript applications.
- Role & Permission Configurators - Provides tools to define hierarchical roles and manage granular permissions for application resources.
- Authorization Policy Loading - Provides asynchronous loading of security policies from external sources during the application bootstrap phase.
- API Metadata Decorators - Attaches security configuration to route handlers using metadata-driven decorators.
- Request Contexts - Extracts user identity and role information from the request context for authorization checks.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
