{"id":45148177,"url":"https://github.com/neko1313/casbin-fastapi-decorator","last_synced_at":"2026-03-09T09:02:08.595Z","repository":{"id":339112300,"uuid":"1154161001","full_name":"Neko1313/casbin-fastapi-decorator","owner":"Neko1313","description":"Authorization decorator factory for FastAPI based on Casbin. No middleware, no extra dependencies in route signatures.","archived":false,"fork":false,"pushed_at":"2026-02-27T04:05:55.000Z","size":334,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-02-27T09:51:55.752Z","etag":null,"topics":["abac","access-control","authorization","casbin","casdoor","decorators","fastapi","fastapi-decorator","jwt","middleware","permissions","python","python3","rbac","sqlalchemy"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Neko1313.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","dco":null,"cla":null}},"created_at":"2026-02-10T04:33:17.000Z","updated_at":"2026-02-27T04:05:58.000Z","dependencies_parsed_at":null,"dependency_job_id":"c39c2f59-4a05-4cb9-becf-49ea49946905","html_url":"https://github.com/Neko1313/casbin-fastapi-decorator","commit_stats":null,"previous_names":["neko1313/casbin-fastapi-decorator"],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/Neko1313/casbin-fastapi-decorator","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Neko1313%2Fcasbin-fastapi-decorator","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Neko1313%2Fcasbin-fastapi-decorator/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Neko1313%2Fcasbin-fastapi-decorator/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Neko1313%2Fcasbin-fastapi-decorator/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Neko1313","download_url":"https://codeload.github.com/Neko1313/casbin-fastapi-decorator/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Neko1313%2Fcasbin-fastapi-decorator/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30288786,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-09T02:57:19.223Z","status":"ssl_error","status_checked_at":"2026-03-09T02:56:26.373Z","response_time":61,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["abac","access-control","authorization","casbin","casdoor","decorators","fastapi","fastapi-decorator","jwt","middleware","permissions","python","python3","rbac","sqlalchemy"],"created_at":"2026-02-20T02:08:24.530Z","updated_at":"2026-03-09T09:02:08.584Z","avatar_url":"https://github.com/Neko1313.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# casbin-fastapi-decorator\n\nAuthorization decorator factory for FastAPI based on [Casbin](https://casbin.org/) and [fastapi-decorators](https://pypi.org/project/fastapi-decorators/).\n\nDecorators are applied to routes — no middleware or dependencies in the endpoint signature.\n\n## Installation\n\n```bash\npip install casbin-fastapi-decorator\n```\n\nAdditional providers:\n\n```bash\npip install \"casbin-fastapi-decorator[jwt]\"   # JWT authentication\npip install \"casbin-fastapi-decorator[db]\"    # Policies from DB (SQLAlchemy)\n```\n\n## Quick start\n\n```python\nimport casbin\nfrom fastapi import FastAPI, HTTPException\nfrom casbin_fastapi_decorator import AccessSubject, PermissionGuard\n\n# 1. Providers — regular FastAPI dependencies\nasync def get_current_user() -\u003e dict:\n    return {\"sub\": \"alice\", \"role\": \"admin\"}\n\nasync def get_enforcer() -\u003e casbin.Enforcer:\n    return casbin.Enforcer(\"model.conf\", \"policy.csv\")\n\n# 2. Decorator factory\nguard = PermissionGuard(\n    user_provider=get_current_user,\n    enforcer_provider=get_enforcer,\n    error_factory=lambda user, *rv: HTTPException(403, \"Forbidden\"),\n)\n\napp = FastAPI()\n\n# 3. Authentication only\n@app.get(\"/me\")\n@guard.auth_required()\nasync def me():\n    return {\"ok\": True}\n\n# 4. Static permission check\n@app.get(\"/articles\")\n@guard.require_permission(\"articles\", \"read\")\nasync def list_articles():\n    return []\n\n# 5. Dynamic check — value from request\nasync def get_article(article_id: int) -\u003e dict:\n    return {\"id\": article_id, \"owner\": \"alice\"}\n\n@app.get(\"/articles/{article_id}\")\n@guard.require_permission(\n    AccessSubject(val=get_article, selector=lambda a: a[\"owner\"]),\n    \"read\",\n)\nasync def read_article(article_id: int):\n    return {\"article_id\": article_id}\n```\n\nArguments of `require_permission` are passed to `enforcer.enforce(user, *args)` in the same order. `AccessSubject` is resolved via FastAPI DI, then transformed by the `selector`.\n\n## API\n\n### `PermissionGuard`\n\n```python\nPermissionGuard(\n    user_provider=...,       # FastAPI dependency that returns the current user\n    enforcer_provider=...,   # FastAPI dependency that returns a casbin.Enforcer\n    error_factory=...,       # callable(user, *rvals) -\u003e Exception\n)\n```\n\n| Method | Description |\n|---|---|\n| `auth_required()` | Decorator: authentication only (user_provider must not raise an exception) |\n| `require_permission(*args)` | Decorator: permission check via `enforcer.enforce(user, *args)` |\n\n### `AccessSubject`\n\n```python\nAccessSubject(\n    val=get_item,                        # FastAPI dependency\n    selector=lambda item: item[\"name\"],  # transformation before enforce\n)\n```\n\nWraps a dependency whose value needs to be obtained from the request and passed to the enforcer. By default, `selector` is identity (`lambda x: x`).\n\n## JWT provider\n\n[`casbin-fastapi-decorator-jwt`](packages/casbin-fastapi-decorator-jwt) — extracts and validates a JWT from the Bearer header and/or a cookie.\n\n```bash\npip install \"casbin-fastapi-decorator[jwt]\"\n```\n\nSee [packages/casbin-fastapi-decorator-jwt/README.md](packages/casbin-fastapi-decorator-jwt/README.md) for full API and usage.\n\n## DB provider\n\n[`casbin-fastapi-decorator-db`](packages/casbin-fastapi-decorator-db) — loads Casbin policies from a SQLAlchemy async session.\n\n```bash\npip install \"casbin-fastapi-decorator[db]\"\n```\n\nSee [packages/casbin-fastapi-decorator-db/README.md](packages/casbin-fastapi-decorator-db/README.md) for full API and usage.\n\n## Casdoor provider\n\n[`casbin-fastapi-decorator-casdoor`](packages/casbin-fastapi-decorator-casdoor) — Casdoor OAuth2 authentication and remote Casbin policy enforcement.\n\n```bash\npip install \"casbin-fastapi-decorator[casdoor]\"\n```\n\n```python\nfrom casbin_fastapi_decorator_casdoor import CasdoorEnforceTarget, CasdoorIntegration\n\ncasdoor = CasdoorIntegration(\n    endpoint=\"http://localhost:8000\",\n    client_id=\"...\", client_secret=\"...\", certificate=cert,\n    org_name=\"my_org\", application_name=\"my_app\",\n    target=CasdoorEnforceTarget(\n        enforce_id=lambda parsed: f\"{parsed['owner']}/my_enforcer\",\n    ),\n)\napp.include_router(casdoor.router)   # GET /callback, POST /logout\nguard = casdoor.create_guard()\n```\n\n`CasdoorEnforceTarget` selects the Casdoor enforce mode — by enforcer, permission, model, resource, or owner. Values can be static strings or callables resolved from the JWT payload at request time.\n\nSee [packages/casbin-fastapi-decorator-casdoor/README.md](packages/casbin-fastapi-decorator-casdoor/README.md) for full API, compose pattern, and usage.\n\n## Examples\n\n| Example | Description |\n|---|---|\n| [`examples/core`](examples/core) | Bearer token auth, file-based Casbin policies |\n| [`examples/core-jwt`](examples/core-jwt) | JWT auth via `JWTUserProvider`, file-based policies |\n| [`examples/core-db`](examples/core-db) | Bearer token auth, policies from SQLite via `DatabaseEnforcerProvider` |\n| [`examples/core-casdoor`](examples/core-casdoor) | Casdoor OAuth2 auth + remote enforcement, facade and compose patterns |\n\n## Development\n\nRequires Python 3.10+, [uv](https://docs.astral.sh/uv/), [task](https://taskfile.dev/).\n\n```bash\ntask install           # uv sync --all-groups + install extras (jwt, db, casdoor)\ntask lint              # ruff + ty + bandit for all packages\ntask tests             # all tests (core + jwt + db + casdoor)\n```\n\nIndividual package tasks:\n\n```bash\ntask core:lint         # lint core only\ntask core:test         # test core only\ntask jwt:lint          # lint JWT package\ntask jwt:test          # test JWT package\ntask db:lint           # lint DB package\ntask db:test           # test DB package (requires Docker for testcontainers)\ntask casdoor:lint      # lint Casdoor package\ntask casdoor:test      # test Casdoor package\n```\n\n## License\n\nMIT\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fneko1313%2Fcasbin-fastapi-decorator","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fneko1313%2Fcasbin-fastapi-decorator","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fneko1313%2Fcasbin-fastapi-decorator/lists"}