gf2-authz - GoFrame v2 + GORM + React + Material UI

gf2-auth is a fork of eko/authz, Backend with GoFrame instead of Fiber, frontend migrated from react-scripts to Vite.

This project brings a backend server with its frontend for managing authorizations.

You can use both Role-Based Acccess Control (RBAC) and Attribute-Based Access Control (ABAC).

Why use it?

🌍 A centralized backend for all your applications authorizations

🙋‍♂️ Supports Role-Based Access Control (RBAC)

📌 Supports Attribute-Based Access Control (ABAC)

⚙️ Go SDKs available

✅ Reliable: Authz uses Authz itself for managing its own internal authorizations

🔍 Audit: We log each check decisions and which policy matched

🔐 Single Sign-On: Use your enterprise SSO to log into the web UI, using OpenID Connect

🕵️‍♂️ Observability: Retrieve metrics and tracing data into your prefered tools

SDKs

In order to help you, we have the following available SDKs:

• Go
• blog example

Please check their documentations for detailled usage. They all use gRPC for communicating with the Authz backend (server-to-server).

Getting started

To get started with this project, run

Running with default config

No configuration is required.

STEP 1: Backend

  git clone https://github.com/vulcangz/gf2-authz.git
  cd gf2-authz
  go mod tidy
  go run main.go

The system then runs with the default config, using SQLite in-memory database.

STEP 2: Admin Dashboard(UI)

  cd ui
  pnpm i
  pnpm dev

visiting http://localhost:3000

Sign in with default credentials: admin / changeme.

STEP 3: Examples blog

1. Create a service account under menu Service accounts in dashboard.
2. Edit main.go. Replace the client_id, client_secret which obtained in the previous step.
3. Edit the principal(name: auth-sa-(your service account name)). Assign a role(authz-admin) to it.
4. Run the test:

go run main.go

5. visiting metrics api for Prometheus metrics observability(default config: disable).

Running with your config

Save example config as config.yaml. Edit it with your config.

Then, same steps as above.

that's all you need to get started!

Credits

• eko/authz
• GoFrame