Skip to content
JFinal's RBAC & ABAC Authorization Plug-in based on jCasbin
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.

jcasbin-jfinal-plugin Build Status Coverage Status

jcasbin-jfinal-plugin is an authorization middleware for JFinal, it's based on It is developed under the latest JFinal 3.4 and Java 8.


git clone

Simple Example

This project itself is a working JFinal project that integrates with jCasbin. The steps to use jCasbin in your own JFinal project are:

  1. Copy the JCasbinAuthzInterceptor class to your own project.
  2. Copy authz_model.conf and authz_policy.csv to your project. You can modify them to your own jCasbin model and policy (or loading policy from DB), see Model persistence and Policy persistence.
  3. Replace the HttpBasicAuthnInterceptor class (which provides HTTP basic authentication) with your own authentication like OAuth, Apache Shiro, Spring Security, etc. Rewrite JCasbinAuthzInterceptor's String getUser(HttpServletRequest request) method to make sure jCasbin can get the authenticated user name.
  4. Make sure the JCasbinAuthzInterceptor interceptor is loaded, so it can filter all your requests. To do this, you can use the following code in your XXXConfig class:
public class DemoConfig extends JFinalConfig {
    public void configInterceptor(Interceptors me) {
        me.add(new JCasbinAuthzInterceptor());


Getting Help


This project is under Apache 2.0 License. See the LICENSE file for the full license text.

You can’t perform that action at this time.