Apache Casbin

Health v2 · maintenance only

Adoption not part of the score

20433 stars · 1761 forks observed · 2026-10-07

What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-19, confidence 0.99

Apache Casbin is an open‑source authorization library that enforces access control policies across multiple programming languages. It supports a wide range of models such as ACL, RBAC, ABAC, and more via configurable policy files and adapters.

Use cases

• enforce role‑based access control in a web application
• implement attribute‑based permissions for a microservice
• manage dynamic ACLs for a multi‑tenant SaaS platform
• integrate policy enforcement into a Go API server
• store and load policies from databases like MySQL or PostgreSQL
• use Casbin’s matcher functions for custom permission logic

When to choose

• you need a language‑agnostic, model‑driven authorization solution
• your project requires support for multiple access control models (RBAC, ABAC, etc.)
• you want to persist policies in various backends via adapters
• you prefer a mature, actively maintained library with a large community

When to avoid

• you need a full‑featured identity provider or authentication system (Casbin only handles authorization)
• your environment cannot accommodate external adapters or custom policy files
• you require built‑in UI for policy management (Casbin provides only an optional online editor)

Facets

library · maturity active

auth authorization security go jvm php python dotnet rust rbac abac acl access-control policy casbin enforcer nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="apache/casbin")