Authorization middleware for fasthttp using Casbin.
go get github.com/casbin/fasthttp-authauthz_model.conf:
[request_definition]
r = sub, obj, act
[policy_definition]
p = sub, obj, act
[policy_effect]
e = some(where (p.eft == allow))
[matchers]
m = r.sub == p.sub && r.obj == p.obj && r.act == p.actauthz_policy.csv:
p, alice, /, GET
p, alice, /data1, GET
p, bob, /data2, POSTpackage main
import (
"fmt"
"log"
"github.com/valyala/fasthttp"
authz "github.com/casbin/fasthttp-auth"
)
func main() {
a, err := authz.NewAuthorizerFromFiles("authz_model.conf", "authz_policy.csv")
if err != nil {
log.Fatal(err)
}
handler := func(ctx *fasthttp.RequestCtx) {
fmt.Fprintf(ctx, "Welcome!")
}
protected := a.Middleware(handler)
fasthttp.ListenAndServe(":8081", protected)
}# Alice can access / and /data1
curl -H 'X-User: alice' http://localhost:8081/
# Bob can only POST to /data2
curl -H 'X-User: bob' http://localhost:8081/data2 -X POST
# Anonymous users get 403
curl http://localhost:8081/Authorization is based on {subject, object, action}:
- Subject: User from
X-Userheader (defaults toanonymous) - Object: URL path being accessed
- Action: HTTP method (GET, POST, etc.)
See example/main.go for a complete example.
go run ./exampleApache-2.0, see LICENSE file