← All work

scoped-authz

A zero-dependency TypeScript library for role-and-scope authorization — the case where some administrators govern everything and others govern a single department, region or tenant. Scope is kept in your own store rather than in the access token, so removing someone’s authority takes effect on a delay you choose instead of whenever their token happens to expire.

Start a project

Open a ticket

Tell us what you’re building. We reply within 24 hours with honest thoughts on scope, timeline, and price.