backend-rbac-audit-log

What problem does it solve?

Backend APIs frequently lack granular role-based access control and reliable audit logging, leading to security vulnerabilities, compliance failures, and inability to trace who modified critical data like user accounts or sales records.

Core Features & Use Cases

• Centralized Permission Map: Single source of truth for roles and permissions that works across both backend and frontend, supporting frameworks like Elysia, Express, Fastify, Hono, and NestJS.
• Production-Ready Guardrails: Includes middleware for permission checking, non-throwing audit log helpers that capture user/IP/user-agent without breaking requests, and protections for edge cases like last admin deletion or self-deactivation.
• Security Auditing Tools: Comes with a script to scan for unauthenticated public endpoints and reference guides for fixing common Elysia plugin boundary issues.
• Use Case: Ideal for admin panels, CRM systems, or any backend requiring user management, role-based permissions, compliance logging, or tracking of data changes for auditing purposes.

Quick Start

Use the backend-rbac-audit-log skill to implement role-based access control and audit logging for your backend API's user management and CRM routes.