🎯
Decorator-based
Apply authorization directly to routes with a decorator. No middleware, no extra parameters in your function signatures.
🔒
Casbin-powered
Built on Apache Casbin — supports RBAC, ABAC, and any access control model you define in your policy files.
🧩
Four optional extras
Extend with file hot-reload, JWT authentication, SQLAlchemy-backed policies, or Casdoor OAuth2. Install only what you need.