AuthzForce

[edit]

• Overview
• Details
• About this entry

AuthzForce

https://authzforce.ow2.org/
Attribute-Based Access Control (ABAC) framework compliant with OASIS XACML 3.0

The AuthzForce project provides an Attribute-Based Access Control (ABAC) framework compliant with the OASIS XACML standard v3.0, that mostly consists of an authorization policy engine and a RESTful authorization server. It was primarily developed to provide advanced access control for Web Services or APIs, but is generic enough to address all kinds of access control use cases. You can use AuthzForce in two ways depending on your needs:

   Java API: AuthzForce provides a XACML PDP (Policy Decision Point) engine as a Java library so that applications can instantiate and use an embedded XACML PDP easily with Java. This API is provided by AuthzForce Core.
   Web API: AuthZForce provides a multi-tenant HTTP/REST API to PDPs and PAPs (Policy Administration Points) that web clients can call to manage policies, request authorization decisions, etc. This API is provided by AuthzForce Server.

Download

Categories

• Programming-language:java
• Programming-language:python
• Protocol:http
• Runs-on:GNU/Linux
• Security:internet
• Version-control:git
• Works-with:xml

Licensing

License

Verified by

Verified on

Notes

License

Apache License v2.0

Verified by

FOSSA

Verified on

3 May 2022

Leaders and contributors

Resources and communication

Software prerequisites

Kind	Description
Required to use	{{{Prerequisite description}}}

Entry

"Apache License v2.0" is not in the list (ACEL, AFL-3.0, AGPL-1.0, AGPL-1.0-or-later, AGPL-3.0, AGPL-3.0-or-later, AGPL-3.0-or-later-with-exception, AGPL-3.0-with-exception, AGPLv1orlater, AGPLv3, ...) of allowed values for the "License" property.

Property "Submitted by" (as page type) with input value "{{{Submitted by}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. "{{{Submitted date}}}" contains an extrinsic dash or other characters that are invalid for a date interpretation.