I've spent the last few weekends building an auth server that comes with a basic RBAC framework. Usually when I start working on a project, I generally tend to re-use the same framework and writing the same auth logic, so I thought of creating this boilerplate.

The concept is straightforward- you generally have some micro-service made up of resources, and each resource has some action(read,write,delete,update). This makes up the permission slug: service.resource.action. These permissions are then attached to roles defined in your system. This project encapsulates this user,role,permission management and enforecement for your FastAPI applications.