Hi,
Does anyone know any company/service/library that offers Access Control Lists or Role Based Access Control via a REST API?
Thank you!
Try JWT. The roles and permission is in the token itself.
Or if you want to more traditional way to look up permission in a database, be sure to think through the performance issues:
Here is a pro and cons of different approaches:
Rafael Rozon
Developer
So, I quick update on this. My colleagues suggested these libraries:
Manage Role-Based Access Control with the REST API
Athenz
Apache Fortress
I think Athenz is particularly interesting. But it may be a bit overkill for a little application. And I haven't found any company or online service that provides this functionality, unfortunately.