Loopback-next: Any support ACL support

[mdhanju]

Description / Steps to reproduce / Feature proposal

Current Behavior

Expected Behavior

_See Reporting Issues for more tips on writing good issues_

[jannyHou]

Hi @mdhanju thanks for being interested in the ACL feature. The authorization story is tracked in epic https://github.com/strongloop/loopback-next/issues/1035, feel free to join the discussion.

[osmanmesutozcan]

@jannyHou I will also be tracking the issue, thanks for the hard work there!

@mdhanju I also had an ACL requirement. Ended up writing a very small extension. You can check it here.

[DatGuyJonathan]

Thanks for the link @jannyHou . Would you be able to share a timeline for the ACL feature?

[dhmlau]

@DatGuyJonathan, for Q2, we're planning to enable mounting Express middleware for authorization. https://github.com/strongloop/loopback-next/issues/2697.

Having said that, there are some examples from the community to create extensions for authorization. See https://github.com/xanthous-tech/loopback-4-accesscontrol from the above comment and possibly another example from https://github.com/strongloop/loopback-next/issues/538#issuecomment-479783245.

[raymondfeng]

We’re starting to add method interceptors, which can be used to add authorization capabilities on top of. Check out https://github.com/strongloop/loopback-next/pull/2687.

[stale[bot]]

This issue has been marked stale because it has not seen activity within six months. If you believe this to be in error, please contact one of the code owners, listed in the CODEOWNERS file at the top-level of this repository. This issue will be closed within 30 days of being stale.

[dhmlau]

Closing as done.
Please see https://loopback.io/doc/en/lb4/Loopback-component-authorization.html and https://github.com/strongloop/loopback-next/tree/master/examples/access-control-migration for reference. Thanks.