Marmelab built simple_rest_rbac, an open-source Caddy module that enforces role-based access control on REST APIs. The middleware checks user permissions from a JSON configuration file, integrates with JWT authentication via placeholders, and returns 403 Forbidden for unauthorized requests. It uses the same permission format as
Table of contents
The Problem: Full-Stack AuthorizationThe Solution: simple_rest_rbacFeaturesHow To Use It With Your APIWhy CaddyWriting A Caddy ModuleGetting The Role From JWTConclusionSort: