oso is an open-source policy engine for authorization that’s embedded in your application. It provides a declarative policy language for expressing authorization logic. You define this logic separately from the rest of your application code, but it executes inside the application and can call directly into it.
nestjs-oso
is a library that simplifies the implementation of oso with
NestJS.
- @OsoClass decorator (automatically registers the class to use within Oso)
- OsoService (a ready to use NestJS service)
▶ yarn add nestjs-oso oso
import { Module } from '@nestjs/common';
import { OsoModule } from 'nestjs-oso';
@Module({
imports: [
OsoModule.forRoot({
loadFile: './permissions.polar',
// or
// loadFile: './**/*.polar',
// loadFiles: ['./rules/*.polar', './permissions.polar'],
}),
],
})
export class AppModule {}
Tip: You don't have to apply either loadFile
or loadStr
. You can inject
OsoService
and access the original API for oso anytime!
You can easily inject OsoService
to be used in your services, controllers,
etc.
import { Injectable } from '@nestjs/common';
import { OsoService } from 'nestjs-oso';
@Injectable()
export class AuthService {
constructor(private oso: OsoService) {}
/*
Implementation that makes use of this.oso
*/
}
To register an class with oso
, use the decorator:
import { OsoClass } from 'nestjs-oso';
@OsoClass()
export class User {
id: string;
}
This will automatically be registered using registerClass
function in oso
.
We love to get help 🙏 Read more about how to get started in CONTRIBUTING 🌳