Go to: https://github.com/casbin/SummerOfCode2022

Google Summer Of Code 2021 for Casbin

Note: There are some significant changes like the smaller project size in GSoC 2021, see details at GSoC official site: https://opensource.googleblog.com/2020/10/google-summer-of-code-2021-is-bringing.html

What is Google Summer Of Code?

Google Summer of Code (GSoC) is a global program held by Google to bring students into open source software development. Students work with an open source organization on a 3 month programming project during their break from school. See more details at: https://summerofcode.withgoogle.com/

Congratulations!

Casbin has been selected as a Google Summer of Code 2021 mentor organization for the second year!

We still don't know how many slots we will get yet. But students are already free-to-go to make contact with Casbin people and do some code-level contributions to Casbin projects to let the community know you more.

How we select students:

The student will be more likely selected if he/she:

1. Contribute to Casbin related project before.
2. Familiar with the techniques required by the idea he selected.
3. Show the previous code related to the idea on personal website or GitHub.
4. Provide a personal website and descriptions for previous work/projects.
5. Provide demo sites for the previous projects if possible.
6. Provide a resume/CV.

Get started

1. Choose an idea from our list: https://github.com/casbin/SummerOfCode2021
2. Send your resume/CV in PDF to: admin@casbin.org
3. Do a self-introduction in: https://gitter.im/casbin/gsoc
4. Get familiar with the existing code, try to solve opened issues for your chosen idea's repo before & after application deadline.
5. If you have questions, you can ask the mentor of the idea via GitHub or Gitter.
6. Submit your proposal in GSoC official site. The deadline is TBD.

Ideas

• Casbin Core Engine (Golang)
• Casdoor
• Casbin Forum
• Casbin for C/C++
• Casbin for Java
• Casbin for .NET
• Casbin Sam
• Casbin for Rust
• Casbin for Node.js
• Casbin Hub
• Casbin for PHP
• Casbin for Python
• Casbin.js
• Casbin for Lua
• Casbin for Dart

Casbin Core Engine (Golang)

Description

Support more features and tune the performance in Casbin core engine. This will first be done in Golang Casbin. Possibly applied to other language implementations.

Some issues to work on:

1. Resolve policy conflicts: casbin/casbin#338
2. Improve the performance of the new BatchEnforce() API: casbin/casbin#710
3. Make an authorization plugin/middleware for kubernetes (k8s): casbin/k8s-authz#2
4. Help solve issues for the 1st-party and 3rd-party middlewares

Requirements

1. Golang
2. Other languages that Casbin is written with

Mentor

Yang Luo, Casbin founder

Casdoor

Description

Build a UI-first centralized authentication / Single-Sign-On (SSO) platform based on OAuth 2.0 / OIDC. It can:

1. Use OAuth 2.0 + OIDC as the authentication protocols.
2. Support popular 3rd-party identity providers like Google, GitHub, Facebook, etc.
3. Has a web portal to manage users, roles and permissions.
4. Use Casbin as authorization method.
5. Support user register, login, password reset, 2FA like Email and SMS.

The current progress is: https://door.casbin.com/. Source code: https://github.com/casbin/casdoor. We want the student to continue the work.

Requirements

1. Golang (backend)
2. Javascript + React + Ant Design (frontend)
3. Casbin

Mentor

Yang Luo, Casbin founder

Casbin Forum

Description

Casbin-forum is a light-weight forum software. It is used by Casbin community as the official developer forum (https://forum.casbin.com/). We hope to fix its bugs and add more features like mailing list to replace the traditional open-source community mailing list.

The current progress is: https://github.com/casbin/casbin-forum

Some issues to work on:

1. Integrate open-source mailing list functionality to our forum: casibase/casibase#112
2. Make it SEO friendly via SSR: casibase/casibase#122
3. The text area is at risk of XSS injection: casibase/casibase#131
4. The ranking pages do not display correctly: casibase/casibase#132
5. Use Casdoor as the authentication system: casibase/casibase#145

Requirements

1. Golang (backend)
2. Javascript + React (frontend)
3. Casbin

Mentor

Junjie Zhang, Casbin member, Yang Luo, Casbin founder

Casbin for C/C++

Description

We already have a C/C++ version Casbin called Casbin-CPP. It already works on all primary OSs, like Windows, Linux, macOS. Most of Casbin's functionalities (for example 90%) should work. There are still many bugs and missing features in Casbin-CPP. Moreover, we also need to make authz middlewares for other C++ projects like Mosquitto and adapters for DB. We also have plan to make Casbin-CPP as a base layer to build the next-generation PyCasbin and PHP-Casbin on top of it (see PyCasbin on CPP) for better performance (a lot of Python packages like numpy and tensorflow rely on the underlying C++ code). So Casbin-CPP needs to provide necessary help if needed for PyCasbin and PHP-Casbin developers.

The current progress is: https://github.com/casbin/casbin-cpp

Requirements

1. C/C++
2. Golang (only need to read code)

Mentor

Joey Xie, Casbin member, Yang Luo, Casbin founder

Casbin for Java

Description

In Java world, Apache Shiro and Spring Security are very popular security frameworks. We need to find ways to improve the Casbin middlewares for both of them, so Shiro and Spring Security users can use jCasbin without many migrating efforts.

Another work is to develop jCasbin' middleware for the popular Java web frameworks except Spring such as Play and Vert.x, like how we did it for Golang: https://casbin.org/docs/en/middlewares

Some issues to work on:

1. Make a Play Framework middleware: casbin/jcasbin#104
2. Make a Vert.x middleware: casbin/jcasbin#105
3. Fix the bug about "ABAC with policy rule" doesn't work: casbin/jcasbin#145
4. Improve the user experience of the SpringBoot middleware: https://github.com/jcasbin/casbin-spring-boot-starter
5. Make an example project that uses our Shiro middleware: https://github.com/jcasbin/shiro-casbin

Requirements

1. Java
2. Other languages that Casbin is written with

Mentor

Zhengjin Fang, Casbin member, Yang Luo, Casbin founder

Casbin for .NET

Description

The feature and ecosystem of Casbin.NET are gradually improving. We hope to provide complete features with a goal to Golang Casbin, excellent performance, and suitable for user experience in .NET. There are some important features that need to be implemented:

1. Rule Indexing feature : casbin/Casbin.NET#132
2. Parallel enforcing feature : casbin/Casbin.NET#133
3. Multiple request, policy, effect, matcher type support : casbin/Casbin.NET#134

Requirements

1. .NET/C#
2. Other languages that Casbin is written with

Mentor

Joey Xie, Casbin member, Zhikui Hua, Casbin member

Casbin Sam

Description

A authorization service based on OAuth 2.x and support centralized authentication / Single-Sign-On (SSO) integration. It can:

1. Use Casbin.NET and Casbin.AspNetCore to authorizate.
2. Provide Web APIs to manage users, roles and permissions.
3. Support integrate OIDC authentication provider (Identity Server 4) and ASP.NET Identity to manage user and sgin in/out.
4. Support be integrated to Dapr or Steeltoe as authentication/authorization provider.

The current progress is: https://github.com/casbin-net/casbin-sam. We want the student to continue the work.

Requirements

1. .NET/C#
2. Casbin.NET and Casbin.AspNetCore
3. Dapr or Steeltoe

Mentor

Joey, Casbin member, Zhikui Hua, Casbin member, Yang Luo, Casbin founder

Casbin for Rust

Description

With Casbin community's effort, the Rust version of Casbin is now mature and ready for production. Casbin-RS can provide access control with blazing fast speed. There are something need to be implemented:

1. Rust version of Casbin-Server

• Use Tonic to implement a gRPC server

• Compatible with multiple adapters: Diesel-Adapter, Sqlx-Adapter, YAML-Adapter

2. JSON Adapter for Casbin-RS

• Fully Asynchronous runtime support with Tokio and async-std

• Support read and write

3. Rocket Middleware for Casbin-RS (#93)

• Implement a middleware for Rocket using Fairings

Requirements

1. Rust
2. Other languages that Casbin is written with

Mentor

Yisheng Chai, Casbin member, Cheng JIANG, Casbin member, Yang Luo, Casbin founder

Casbin for Node.js

Improving the user experience of Node-Casbin will be our focus. Currently, Node-Casbin provides a set of asynchronous API, if we can provide a set of synchronous API, it will be a great experience.

Some issues to work on:

• Support a full set of Sync API like enforcer.enforce()(casbin/node-casbin#224)

• Scaling Access Control Lists for multi-million users(casbin/node-casbin#147)

• Sequelize v6 compatibility: addPolicies & removePolicies problem(casbin/node-casbin#207)

Requirements

1. JavaScript (Node.js/TypeScript)
2. Other languages that Casbin is written with

Mentor

Zixuan Liu, Casbin member

Casbin Hub

Casbin Hub is similar to Docker Hub website, which is mainly used to share and discuss the model and policy of Casbin, we need to implement the following features:

1. Support anyone to share the model and policy of Casbin. Sharers must describe the scenario that this model applies, and mark the classification, like so: Frontend, Backend, Cloud, Message System, and so on. Users can discuss shared content.

2. Integrate the Casbin-Online-Editor is used to test or debug the model and policy shared by users.

Requirements

1. Golang (Backend)
2. React (Frontend)
3. Casbin

Mentor

Zixuan Liu, Casbin member, Yang Luo, Casbin founder

Casbin for PHP

Description

1. Full implementation of Casbin(go) by PHP, then fix issues.
2. Improve some extensions.

Requirements

1. PHP
2. Casbin

Mentor

Jon Lee, Casbin member

Casbin for Python

Description

1. At present, compared to Casbin for Golang, Pycasbin is not very perfect, especially the lack of RBAC API, so we hope that Pycasbin can fully implement the function of Casbin (Go).
2. PyCasbin's adaptation to various frameworks, such as Django, Tornado, etc.

Pycasbin organization: https://github.com/pycasbin Some issues to work on: https://github.com/casbin/pycasbin/issues

Requirements

1. Python
2. Other languages that Casbin is written with

Mentor

Jon Lee, Casbin member

Casbin.js

Quite a lot of users want to use Casbin to control web frontend UI elements, like:

1. Some tabs are only visible to admin users.
2. Some buttons should be grayed-out for users with no permission to click them.
3. A list can only show filtered items based on a user's permission rights.

Currently, Node-Casbin already supports to run in browser. But the API like enforce() is still not friendly to frontend developers to control the visibility of a button. So we need:

1. A frontend developer friendly API for authorization based on Casbin, e.g., isVisible(button_id)
2. A mechanism to load model and policy data from backend. Of course we assume the backend also uses a Casbin implementation.

The current progress is: https://github.com/casbin/casbin.js

Currently, we still lack the middlewares for Angular, React and Vue. These new JS frameworks are very popular and making middlewares for them will boost our usage from their population.

Some issues to work on:

1. Make a React authz middleware for Casbin.js: casbin/casbin.js#26
2. Make a Vue authz middleware for Casbin.js: casbin/casbin.js#27
3. Support Key Matching: casbin/casbin.js#15
4. Support domains in model: casbin/casbin.js#25
5. Resolve Casbin.js 0.1.0 with react-scripts 4.0.2 conflict: casbin/casbin.js#28

Requirements

1. Javascript
2. Node-Casbin
3. At least one backend language like Golang

Mentor

Zihui Liu, Casbin member, Yang Luo, Casbin founder

Casbin for Lua

Description

Port Golang Casbin into Lua. We call it lua-casbin. It should work on the Nginx + OpenResty stack. Most of Casbin's functionalities (for example 90%) should work.

Nginx is now the most popular HTTP server in the world. OpenResty is a web platform based on Nginx which can run Lua scripts using its LuaJIT engine. Nginx + OpenResty are usually used in edge computing and authorization is a real need for its scenario. Lua-Casbin will help Nginx and OpenResty users on checking permissions of the coming HTTP request.

The current progress is: https://github.com/casbin/lua-casbin

Requirements

1. Nginx
2. OpenResty
3. Lua
4. Golang (only need to read code)

Mentor

Yang Luo, Casbin founder

Casbin for Dart

Description

Port Casbin to Dart, little progress has been made in the project so it's excellent for jumping in early, you will be responsible for the design and making of the Dart port with the help of the mentor, most of Casbin's functionalities should work.

The current progress is: https://github.com/casbin/dart-casbin

Requirements

1. Dart
2. Other languages that Casbin is written with.

Mentor

Tomás Arias, Casbin member