strong_attributes provides a strong_parameters-style permit interface using a wrapper around your model. By accessing model attributes in your views only through this interface, you ensure that any attributes displayed are explicitly permitted, and sensitive data is not displayed to unauthorized ...

Pundit authorization support for new graphql interpreter

Add notifications to cancancan authorization gem

An easy and flexible access control system. Authentication and authorization before a method/action is executed.

This is the Authress SDK used to integrate with the authorization as a service provider Authress at https://authress.io. The full documentation is available in the Github repo Readme: https://github.com/Authress/authress-sdk.rb.

This gem provides a Ruby read-only interface to the gitolite git backend system (by parsing the configuration file found in the bare gitolite-admin repository). It aims to enable permission queries based on data written in the gitolite-admin repository. This fork is designed to work as part of a...

A Ruby library for declaring, composing and executing GraphQL queries for AWS AppSync IAM Authorization

Escher authorization for rack based http servers with ease in a form of middleware

Next generation authorization

A pure Ruby implementation of macaroons for flexible authorization credentials

A base policy to support management of authorization logic

Rhino automatically generates complete REST APIs from ActiveRecord models with filtering, sorting, search, pagination, role-based authorization, multi-tenancy, audit trail, and more.

A Ruby gem implementing SMART App Launch 2.2.0 and UDAP Security STU2 for healthcare client applications. It supports SMART OAuth 2.0 authorization, PKCE, private_key_jwt assertions, Backend Services, UDAP signed metadata discovery, and certificate-backed UDAP Dynamic Client Registration.

Drop in authorization and authentication suite for Rails APIs. Features include user registration, stateless authentication using OAuth2, roles and permissions, password reset workflow, guest access, policy enforcement, JSON API serialization, two-factor authentication support, an...

Dried authorization solution for Rails. All permissions are stored in a single location.

AdvancedSelect provides helper-rendered Rails partials, Stimulus dropdown behavior, Turbo Stream-compatible option updates, plain CSS, and i18n defaults while leaving data loading, authorization, and endpoints to the host app.

Add MCP tool serving to any Rails app. Write @rbs type annotations with predicate tags (@requires, @feature, or custom) and the gem compiles per-user JSON Schema automatically — filtering fields by permissions, feature flags, and plan tiers at request time.

This gem enables access authorization control, based on the access permission settings for each controller and its actions, at the model level.

Kickplan lets you monetize your SaaS app by providing billing, feature access and authorization infrastructure.

Provides access authorization for owners and resources, via a simple Permission ActiveRecord model and a Policy class.