Backend for Frontend (BFF) for your application: JWT sessions, role-based access control, and authenticated forwarding to internal microservices. Put Gatelin behind an edge reverse proxy (Traefik, nginx, Envoy) — that proxy is the public gateway; Gatelin is the app’s API layer.
| Image | Registry |
|---|---|
BFF (includes Admin UI under /admin) |
ghcr.io/alten-group/gatelin |
| Migration | ghcr.io/alten-group/gatelin-migration |
- Proxy — Dynamic route matching and forwarding to target microservices
- Authentication — Consumer session management with JWT access and refresh token issuance, validation, and refresh
- Authorization — Role-based access control (RBAC/ACL) validation per route, per property, per condition...
- Route management — Organize and control endpoints (applications, services, resources, routes, methods, operations)
- Role management — Define, scope, and assign permissions to application roles
- Permission management — Granular operation access (GET, POST, etc.) per API, route, with optional condition and field restrictions
- CORS management — Control allowed origins
- Admin UI — Angular-based front-end to manage sessions, routes, roles, and ACL
Full documentation is available at https://gatelin.fr.
Integrate Gatelin into your application using published Docker images :
# 1. Clone the repository
git clone https://github.com/ALTEN-group/Gatelin.git
cd gatelin
# 2. Generate the development environment file
bash scripts/setup-env.sh
# 3. Start the stack (seeds Foxnox mock passwords into swagger automatically)
bash scripts/start-dev.shSee CONTRIBUTING.md for the full development workflow, testing, and production build instructions.
MIT — see LICENSE and NOTICE.md. Published and maintained by ALTEN.