← Dev Tools

graphql-casl

CASL permission rules for GraphQL resolvers.

GitHub → npm →

graphql-casl is a toolkit for defining CASL authorization rules on GraphQL resolvers. The runtime is a graphql-middleware plugin for declaring them, with optional scoping and envelop entry points; a companion codegen plugin emits typed subject bindings from your schema, so the rules stay in step with the types; and @can / @rule SDL directives let you declare a permission next to the field it guards.

Stack: TypeScript, graphql-middleware, CASL, GraphQL Codegen. An npm-workspaces monorepo published as @vantreeseba/graphql-casl.