casbin | authorization library that supports access control models | Authorization library

Better yet, return an option because the only possible error is that the index is not present in the map,

so..

I'm from Casbin team. The source code of https://casbin.org/CssToAndFromReact/ is the master branch of repo: https://github.com/casbin/CssToAndFromReact and it's deployed to the gh-pages branch.

We forked from https://github.com/htbkoo/CssToAndFromReact and add some changes. You can assemble a script to run automatically against multiple files via using our source code.

Your reasoning is correct, as it actually fits the definition of "resource". Being your own application the resource server, Keycloak provides the authorization to access it or not, depending on what you consider.

I guess your concrete case is covered by User Managed Access:

As an example, consider a user Alice (resource owner) using an Internet Banking Service (resource server) to manage his Bank Account (resource). One day, Alice decides to open her bank account to Bob (requesting party), a accounting professional. However, Bob should only have access to view (scope) Alice’s account.

As a resource server, the Internet Banking Service must be able to protect Alice’s Bank Account. For that, it relies on Keycloak Resource Registration Endpoint to create a resource in the server representing Alice’s Bank Account.

At this moment, if Bob tries to access Alice’s Bank Account, access will be denied. The Internet Banking Service defines a few default policies for banking accounts. One of them is that only the owner, in this case Alice, is allowed to access her bank account.

However, Internet Banking Service in respect to Alice’s privacy also allows her to change specific policies for the banking account. One of these policies that she can change is to define which people are allowed to view her bank account. For that, Internet Banking Service relies on Keycloak to provide to Alice a space where she can select individuals and the operations (or data) they are allowed to access. At any time, Alice can revoke access or grant additional permissions to Bob.

For your case the resource would be the thing and your application would need to register it in the Resource Registration Endpoint. Then, you might use policies to define who accesses the resource and how.