apache/casbin-jcasbin

Health v2 · maintenance only

Adoption not part of the score

2652 stars · 491 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

jCasbin is an Apache-licensed Java authorization library that enforces access control using models such as ACL, RBAC, and ABAC defined in configuration files. Policies can be stored in files or databases via adapters, and it shares the same API and behavior as other Casbin language implementations.

Use cases

• enforce role-based access control in a Java application
• implement ACL permissions for API endpoints
• add ABAC attribute-based authorization to a Spring service
• store authorization policies in MySQL or PostgreSQL
• manage RBAC role hierarchies with domains
• switch authorization models without rewriting code

When to choose

• you need flexible, model-driven authorization in a JVM/Java project
• you want policies persisted in a database via adapters
• you need RBAC, ABAC, or ACL support with a consistent cross-language API
• you want authorization logic configurable via model files rather than hardcoded

When to avoid

• you need authentication or identity management - Casbin only handles authorization
• you want a full-featured turnkey admin UI for managing permissions
• you need a non-JVM language - use the Casbin implementation for your stack

Facets

library · maturity stable

authorization auth security middleware security backend developer-tools jvm cross-platform rbac abac acl access-control casbin policy-enforcement permissions

Member repositories

For agents

markdown · JSON · MCP: product_card(name="apache/casbin-jcasbin")