# casbin > An authorization library that supports access control models like ACL, RBAC, ABAC in Node.JS Latest version **5.51.1** (published 2026-06-25) · Apache-2.0 license · 0 weekly downloads ## Install ```sh npm install casbin pnpm add casbin yarn add casbin bun add casbin ``` ## Health **Score 70/100 (B)** — status: active. Positive: has types; esm support; no vulnerabilities; recently updated; high maintenance score; high quality score. Warnings: low downloads. ## Facts | | | |---|---| | Version | 5.51.1 | | Published | 2026-06-25 | | First published | 2018-08-09 | | Weekly downloads | 0 | | License | Apache-2.0 | | TypeScript types | bundled | | Module format | ESM + CommonJS | | Dependencies | 5 | | Unpacked size | 497.8 KB | | Known vulnerabilities | 0 (+1 in 1 direct dependencies) | | Install scripts | no | | GitHub stars | 2915 | | Maintainers | hsluoyz, nodece | ## Links - npm: https://www.npmjs.com/package/casbin - Repository: https://github.com/apache/casbin-node-casbin - Homepage: https://casbin.apache.org - Issues: https://github.com/apache/casbin-node-casbin/issues - npm.io page: https://npm.io/package/casbin ## Dependencies (5) - [buffer](https://npm.io/package/buffer.md) ^6.0.3 - [csv-parse](https://npm.io/package/csv-parse.md) ^5.5.6 - [minimatch](https://npm.io/package/minimatch.md) ^10.2.1 - [await-lock](https://npm.io/package/await-lock.md) ^2.0.1 - [@casbin/expression-eval](https://npm.io/package/@casbin/expression-eval.md) ^5.3.0 ## Recent versions - 5.51.1 (latest) — 2026-06-25 - 5.51.0-snapshot.1 (snapshot) — 2026-04-28 - 5.14.0-beta.4 (beta) — 2022-04-15 - 5.51.0 — 2026-06-22 - 5.50.0 — 2026-04-25 - 5.49.0 — 2026-02-19 - 5.48.0 — 2026-01-10 - 5.47.0 — 2026-01-10 - 5.46.0 — 2026-01-03 - 5.45.3 — 2026-01-01 - 5.45.2 — 2025-12-28 - 5.45.1 — 2025-12-19 - 5.45.0 — 2025-12-08 - 5.44.0 — 2025-12-08 - 5.43.0 — 2025-12-08 - … 140 more at https://npm.io/package/casbin/versions ## README # Node-Casbin [![GitHub Actions](https://github.com/apache/casbin-node-casbin/workflows/main/badge.svg)](https://github.com/apache/casbin-node-casbin/actions) [![Coverage Status](https://codecov.io/gh/apache/casbin-node-casbin/branch/master/graph/badge.svg)](https://codecov.io/gh/apache/casbin-node-casbin) [![Release](https://img.shields.io/github/release/apache/casbin-node-casbin.svg)](https://github.com/apache/casbin-node-casbin/releases/latest) [![NPM version][npm-image]][npm-url] [![NPM download][download-image]][download-url] [![install size](https://packagephobia.now.sh/badge?p=casbin)](https://packagephobia.now.sh/result?p=casbin) [![Discord](https://img.shields.io/discord/1022748306096537660?logo=discord&label=discord&color=5865F2)](https://discord.gg/S5UjpzGZjN) [npm-image]: https://img.shields.io/npm/v/casbin.svg?style=flat-square [npm-url]: https://npmjs.org/package/casbin [download-image]: https://img.shields.io/npm/dm/casbin.svg?style=flat-square [download-url]: https://npmjs.org/package/casbin **News**: still worry about how to write the correct `node-casbin` policy? [Casbin online editor](https://casbin.apache.org/editor) is coming to help! ![casbin Logo](casbin-logo.png) `node-casbin` is a powerful and efficient open-source access control library for Node.JS projects. It provides support for enforcing authorization based on various [access control models](https://wikipedia.org/wiki/Computer_security_model). ## All the languages supported by Casbin: | [![golang](https://casbin.apache.org/img/langs/golang.png)](https://github.com/casbin/casbin) | [![java](https://casbin.apache.org/img/langs/java.png)](https://github.com/casbin/jcasbin) | [![nodejs](https://casbin.apache.org/img/langs/nodejs.png)](https://github.com/apache/casbin-node-casbin) | [![php](https://casbin.apache.org/img/langs/php.png)](https://github.com/php-casbin/php-casbin) | | --------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------- | | [Casbin](https://github.com/casbin/casbin) | [jCasbin](https://github.com/casbin/jcasbin) | [node-Casbin](https://github.com/apache/casbin-node-casbin) | [PHP-Casbin](https://github.com/php-casbin/php-casbin) | | production-ready | production-ready | production-ready | production-ready | | [![python](https://casbin.apache.org/img/langs/python.png)](https://github.com/casbin/pycasbin) | [![dotnet](https://casbin.apache.org/img/langs/dotnet.png)](https://github.com/casbin-net/Casbin.NET) | [![c++](https://casbin.apache.org/img/langs/cpp.png)](https://github.com/casbin/casbin-cpp) | [![rust](https://casbin.apache.org/img/langs/rust.png)](https://github.com/casbin/casbin-rs) | | ----------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | | [PyCasbin](https://github.com/casbin/pycasbin) | [Casbin.NET](https://github.com/casbin-net/Casbin.NET) | [Casbin-CPP](https://github.com/casbin/casbin-cpp) | [Casbin-RS](https://github.com/casbin/casbin-rs) | | production-ready | production-ready | beta-test | production-ready | ## Documentation https://casbin.apache.org/docs/overview ## Installation ```shell script # NPM npm install casbin --save # Yarn yarn add casbin ``` ## Get started New a `node-casbin` enforcer with a model file and a policy file, see [Model](#official-model) section for details: ```node.js // For Node.js: const { newEnforcer } = require('casbin'); // For browser: // import { newEnforcer } from 'casbin'; const enforcer = await newEnforcer('basic_model.conf', 'basic_policy.csv'); ``` > **Note**: you can also initialize an enforcer with policy in DB instead of file, see [Persistence](#policy-persistence) section for details. Add an enforcement hook into your code right before the access happens: ```node.js const sub = 'alice'; // the user that wants to access a resource. const obj = 'data1'; // the resource that is going to be accessed. const act = 'read'; // the operation that the user performs on the resource. // Async: const res = await enforcer.enforce(sub, obj, act); // Sync: // const res = enforcer.enforceSync(sub, obj, act); if (res) { // permit alice to read data1 } else { // deny the request, show an error } ``` Besides the static policy file, `node-casbin` also provides API for permission management at run-time. For example, You can get all the roles assigned to a user as below: ```node.js const roles = await enforcer.getRolesForUser('alice'); ``` See [Policy management APIs](#policy-management) for more usage. ## Policy management Casbin provides two sets of APIs to manage permissions: - [Management API](https://casbin.apache.org/docs/management-api): the primitive API that provides full support for Casbin policy management. - [RBAC API](https://casbin.apache.org/docs/rbac-api): a more friendly API for RBAC. This API is a subset of Management API. The RBAC users could use this API to simplify the code. ## Official Model https://casbin.apache.org/docs/supported-models ## Policy persistence https://casbin.apache.org/docs/adapters ## Policy consistence between multiple nodes https://casbin.apache.org/docs/watchers ## Role manager https://casbin.apache.org/docs/role-managers ## Contributors This project exists thanks to all the people who contribute. ## Star History [![Star History Chart](https://api.star-history.com/svg?repos=apache/casbin-node-casbin&type=Date)](https://star-history.com/#apache/casbin-node-casbin&Date) ## License This project is licensed under the [Apache 2.0 license](LICENSE). ## Contact If you have any issues or feature requests, please contact us. PR is welcomed. - https://github.com/apache/casbin-node-casbin/issues - https://discord.gg/S5UjpzGZjN --- _Source: https://npm.io/package/casbin · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._