wrdn-authz

What problem does it solve?

Authorization defects in code changes where a caller bypasses a permission boundary due to IDOR, missing ownership or tenant scoping, role checks that fail open, mass assignment, or token/session claims trusted for decisions.

Core Features & Use Cases

• Trace-first investigation workflow that reads the full function, route, and data path to prove or disprove a bypass.
• Guides reviewers to check middleware, decorators, routers, and permission logic across frameworks; loads framework-specific references when needed.
• Use when asked to review route handlers, middleware, decorators, resolvers, RBAC/ACL logic, serializers, ORM queries, token-derived scopes, or admin surfaces.

Quick Start

Review a diff for authorization boundaries and run wrdn-authz to surface potential defects in code paths handling authentication context and permission checks.