NestJS OSO – Authorization code for NestJS

oso is an open-source policy engine for authorization that’s embedded in your application. It provides a declarative policy language for expressing authorization logic. You define this logic separately from the rest of your application code, but it executes inside the application and can call directly into it.

nestjs-oso is a library that simplifies the implementation of oso with NestJS.

Features

• @OsoClass decorator (automatically registers the class to use within Oso)
• OsoService (a ready to use NestJS service)

Quickstart

▶ yarn add nestjs-oso oso

import { Module } from '@nestjs/common';
import { OsoModule } from 'nestjs-oso';

@Module({
  imports: [
    OsoModule.forRoot({
      loadFiles: ['./permissions.polar'],
      // or multiple files
      // loadFiles: ['./permissions.polar', './other-policies.polar'],
      // or using wildcards
      // loadFiles: ['./**/*.polar']
    }),
  ],
})
export class AppModule {}

Tip: You don't have to apply either loadFiles or loadStr. You can inject OsoService and access the original API for oso anytime!

Example