Note: There are some significant changes in GSoC 2022 like expanding eligibility and multiple sizes of projects, see details at GSoC official site: https://opensource.googleblog.com/2021/11/expanding-google-summer-of-code-in-2022.html

Google Summer of Code (GSoC) is a global program held by Google to bring students into open source software development. Students work with an open source organization on a 3 month programming project during their break from school. See more details at: https://summerofcode.withgoogle.com/

The student will be more likely selected if he/she:

1. Contribute to Casbin related project before.
2. Familiar with the techniques required by the idea he selected.
3. Show the previous code related to the idea on personal website or GitHub.
4. Provide a personal website and descriptions for previous work/projects.
5. Provide demo sites for the previous projects if possible.
6. Provide a resume/CV.

1. Choose an idea from our list: https://github.com/casbin/SummerOfCode2022
2. Send your resume/CV in PDF to: [email protected]
3. Do a self-introduction in: https://gitter.im/casbin/gsoc
4. Get familiar with the existing code, try to solve opened issues for your chosen idea's repo before & after application deadline.
5. If you have questions, you can ask the mentor of the idea via GitHub or Gitter.
6. Submit your proposal in GSoC official site. The deadline is TBD.

• Casbin Core Engine (Golang)
• Casdoor
• Casnode
• Casbin for C/C++
• Casbin for Java
• Casbin for .NET
• Casbin Sam
• Casbin for Rust
• Casbin for Node.js
• Casbin Hub
• Casbin for PHP
• Casbin for Python
• Casbin.js
• Casbin for Lua
• Casbin for Dart
• Casbin for Swift

Support more features and tune the performance in Casbin core engine. This will first be done in Golang Casbin. Possibly applied to other language implementations.

Some issues to work on:

1. Make a Casbin middleware for go-zero: apache/casbin#957
2. Improve the performance of the new BatchEnforce() API: apache/casbin#710
3. Make a default implementation of WatcherEx: apache/casbin#943
4. Help solve issues for the 1st-party and 3rd-party middlewares

1. Golang
2. Other languages that Casbin is written with

Yang Luo, Casbin founder

350 hour

Medium

Build a UI-first centralized authentication / Single-Sign-On (SSO) platform based on OAuth 2.0 / OIDC. It can:

1. Use OAuth 2.0 + OIDC as the authentication protocols.
2. Support popular 3rd-party identity providers like Google, GitHub, Facebook, etc.
3. Has a web portal to manage users, roles and permissions.
4. Use Casbin as authorization method.
5. Support user register, login, password reset, 2FA like Email and SMS.

The current progress is: https://door.casdoor.com/. Source code: https://github.com/casdoor/casdoor. We want the student to continue the work.

Some issues to work on:

1. Support SAML as IdP: casdoor/casdoor#405
2. Support password hashing in LDAP: casdoor/casdoor#499
3. Add Telegram provider: casdoor/casdoor#341
4. Add Casbin model and policy management: casdoor/casdoor#95
5. Design and develop a more beautiful frontend portal: casdoor/casdoor#69

1. Golang (backend)
2. Javascript + React + Ant Design (frontend)
3. Casbin

Yang Luo, Casbin founder

350 hour

Medium

Casnode is a light-weight forum software. It is used by Casbin community as the official developer forum (https://forum.casbin.com/). We hope to fix its bugs and add more features like mailing list to replace the traditional open-source community mailing list.

The current progress is: https://github.com/casbin/casnode

Some features to add/improve:

1. Further optimized the project UI: https://github.com/casbin/casnode/issues/400 Now casnode UI may break on some models, mainly mobile phones, we need to further optimize our project UI to fix it.
2. Anonymous-Post Note: we may change whether to enable the node's anonymous function via the admin console.
3. Improve the part of https://forum.casbin.com/api and https://forum.casbin.com/swagger/#/ that provides API externally.
4. Implement notes, so users could create and publish notes: https://github.com/casbin/casnode/issues/341.
5. Implement timeline, so users could post their thoughts and reply to others' thoughts there: https://github.com/casbin/casnode/issues/341
6. Add RSS feed.
7. Add some metrics, for Prometheus or others.
8. Backup and recovery data from backup files.

Code quality maintenance:

1. Add configurable logs. Notes: this may add a completion log system for casnode using zap.
2. More friendly error handling instead of panic. Notes: this may be built on a well-established logging system
3. Add some commits for code. Notes: This could be finished when you read the code.
4. Improve performance, such as SQL query, cache, etc.

And other issues that may arise during the time.

1. Golang (backend)
2. Javascript + React (frontend)
3. Casbin

Junjie Zhang, Casbin member, Yang Luo, Casbin founder

175 hour

Easy

We already have a C/C++ version Casbin called Casbin-CPP. It already works on all primary OSs, like Windows, Linux, macOS. Most of Casbin's functionalities (for example 90%) should work. There are still many bugs and missing features in Casbin-CPP. Moreover, we also need to make authz middlewares for other C++ projects like Mosquitto and adapters for DB. We also have plan to make Casbin-CPP as a base layer to build the next-generation PyCasbin and PHP-Casbin on top of it (see PyCasbin on CPP) for better performance (a lot of Python packages like numpy and tensorflow rely on the underlying C++ code). So Casbin-CPP needs to provide necessary help if needed for PyCasbin and PHP-Casbin developers.

The current progress is: https://github.com/casbin/casbin-cpp

1. C/C++
2. Golang (only need to read code)

Joey Xie, Casbin member, Yang Luo, Casbin founder

175 hour

Hard

In Java world, Apache Shiro and Spring Security are very popular security frameworks. We need to find ways to improve the Casbin middlewares for both of them, so Shiro and Spring Security users can use jCasbin without many migrating efforts.

Another work is to develop jCasbin' middleware for the popular Java web frameworks except Spring such as Play and Vert.x, like how we did it for Golang: https://casbin.org/docs/en/middlewares

Some issues to work on:

1. Make a Play Framework middleware: apache/casbin-jcasbin#104
2. Make a Vert.x middleware: apache/casbin-jcasbin#105
3. Fix the bug about "ABAC with policy rule" doesn't work: apache/casbin-jcasbin#145
4. Improve the user experience of the SpringBoot middleware: https://github.com/jcasbin/casbin-spring-boot-starter
5. Make an example project that uses our Shiro middleware: https://github.com/jcasbin/shiro-casbin

1. Java
2. Other languages that Casbin is written with

Zhengjin Fang, Casbin member, Yang Luo, Casbin founder

175 hour

Medium

The feature and ecosystem of Casbin.NET are gradually improving. We hope to provide complete features with a goal to Golang Casbin, excellent performance, and suitable for user experience in .NET.

There are some important features that need to be implemented:

1. Rule Indexing feature : apache/casbin-Casbin.NET#132
2. Parallel enforcing feature : apache/casbin-Casbin.NET#133
3. Multiple request, policy, effect, matcher type support : apache/casbin-Casbin.NET#134

1. .NET/C#
2. Other languages that Casbin is written with

Joey Xie, Casbin member, Zhikui Hua, Casbin member

175 hour

Medium

A authorization service based on OAuth 2.x and support centralized authentication / Single-Sign-On (SSO) integration.

Some issues to work on:

1. Use Casbin.NET and Casbin.AspNetCore to authorizate.
2. Provide Web APIs to manage users, roles and permissions.
3. Support integrate OIDC authentication provider (Identity Server 4) and ASP.NET Identity to manage user and sgin in/out.
4. Support be integrated to Dapr or Steeltoe as authentication/authorization provider.

The current progress is: https://github.com/casbin-net/casbin-sam. We want the student to continue the work.

1. .NET/C#
2. Casbin.NET and Casbin.AspNetCore
3. Dapr or Steeltoe

Joey, Casbin member, Zhikui Hua, Casbin member, Yang Luo, Casbin founder

175 hour

Medium

With Casbin community's effort, the Rust version of Casbin is now mature and ready for production. Casbin-RS can provide access control with blazing fast speed.

There are something need to be implemented，from easy to hard:

1. Embrace Rust 2021 edition [Easy]

• Complete the migration from edition 2018 to edition 2021.
• Clean up stale and meaningless dependencies and make clippy happy.

Note This work will help you get familiar with the Rust toolchain and the existing work of Casbin-RS, so please complete it for at least two repos.

2. Continuous maintenance of the surrounding ecology [Medium]

• Implement a middleware for Poem with examples.
• An article introducing how to use casbin-rs with poem.
• Participate in the maintenance of at least one other repo, such as sqlx-adapter or casbin-grpc.

Note This work will help you understand the mechanics of casbin's operation. In addition, we hope you can present your works, which will become an important milestone for you in the casbin community.

3. Explore casbin-rs in real-world/distributed applications [Hard]

• You can choose to:
  • Implement a real-world application with casbin-rs, Or
  • Implementing openraft-based distributed casbin clusters/plugins.
• An article that describes your current work.

Note Go beyond the existing casbin-rs projects, this is a job that is completely led by you. casbin-grpc and casbin-raft are the results of some previous explorations.

1. Rust
2. Other languages that Casbin is written with

Chojan Shang, Casbin member, Yisheng Chai, Casbin member, Cheng JIANG, Casbin member, Yang Luo, Casbin founder

175 hour

Hard

Improving the user experience of Node-Casbin will be our focus. Currently, Node-Casbin provides a set of asynchronous API, if we can provide a set of synchronous API, it will be a great experience.

Some issues to work on:

• Support a full set of Sync API like enforcer.enforce()(apache/casbin-node-casbin#224)

• Scaling Access Control Lists for multi-million users(apache/casbin-node-casbin#147)

• Sequelize v6 compatibility: addPolicies & removePolicies problem(apache/casbin-node-casbin#207)

1. JavaScript (Node.js/TypeScript)
2. Other languages that Casbin is written with

Zixuan Liu, Casbin member

175 hour

Medium

Casbin Hub is similar to Docker Hub website, which is mainly used to share and discuss the model and policy of Casbin.

We need to implement the following features:

1. Support anyone to share the model and policy of Casbin. Sharers must describe the scenario that this model applies, and mark the classification, like so: Frontend, Backend, Cloud, Message System, and so on. Users can discuss shared content.

2. Integrate the Casbin-Online-Editor is used to test or debug the model and policy shared by users.

1. Golang (Backend)
2. React (Frontend)
3. Casbin

Zixuan Liu, Casbin member, Yang Luo, Casbin founder

175 hour

Medium

PHP-Casbin An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

1. Add AddPermissionsForUser API.
2. Add cache for g function, refer to: https://github.com/casbin/casbin/blob/master/util/builtin_operators.go#L333.
3. Integrate laravel's Gates in Laravel-Authz.
4. Implementation of WatcherEx, basic Watcher: Swoole Redis watcher Workerman Redis watcher.
5. Implement propel-adapter, Propel is a highly customizable and blazing fast ORM library for PHP.
6. Consistent with the functionality of Casbin Core Engine (Golang).
7. Bug fixes in issues, improve some extensions.

1. PHP
2. Casbin

Jon Lee, Casbin member

350 hour

Medium

1. At present, compared to Casbin for Golang, Pycasbin is not very perfect, especially the lack of RBAC API, so we hope that Pycasbin can fully implement the function of Casbin (Go).
2. PyCasbin's adaptation to various frameworks, such as Django, Tornado, etc.

Pycasbin organization: https://github.com/pycasbin

1. Implement redis-adapter.
2. Implement etcd-adapter.
3. Improve performance for enforce().
4. Complete implementation of PyCasbin-on-CPP.
5. Reimplement the implementation of Pycasbin in Django, introduce Django's Middleware, Caching, Logging, and integrate the Django authentication system, and existing plugins: django-casbin django-orm-adapter.

Some issues to work on: https://github.com/casbin/pycasbin/issues

1. Python
2. Other languages that Casbin is written with

Jon Lee, Casbin member

350 hour

Medium

Quite a lot of users want to use Casbin to control web frontend UI elements, like:

1. Some tabs are only visible to admin users.
2. Some buttons should be grayed-out for users with no permission to click them.
3. A list can only show filtered items based on a user's permission rights.

Over time we have made node-casbin a cross-platform Javascript permission control library and have called the new library casbin.js. The next step is to refactor node-casbin to a casbin.js-based wrapper. Another possible idea is create a browser-casbin for front-end developers with front-end friendly api.

The current progress is: https://github.com/casbin/casbin.js

Currently, we still lack the middlewares for Angular, React and Vue. These new JS frameworks are very popular and making middlewares for them will boost our usage from their population.

1. Sync progress with node-casbin
2. Update vue-authz and react-authz to new casbin.js.
3. Refactor node-casbin to casbin.js wrapper.

1. Typescript
2. Node-Casbin
3. Vue or React development experience
4. At least one backend language like Golang

Xinyu Zhou, Casbin member, Yang Luo, Casbin founder

350 hour

Hard

Port Golang Casbin into Lua. We call it lua-casbin. It should work on the Nginx + OpenResty stack. Most of Casbin's functionalities (for example 90%) should work.

Nginx is now the most popular HTTP server in the world. OpenResty is a web platform based on Nginx which can run Lua scripts using its LuaJIT engine. Nginx + OpenResty are usually used in edge computing and authorization is a real need for its scenario. Lua-Casbin will help Nginx and OpenResty users on checking permissions of the coming HTTP request.

The current progress is: https://github.com/casbin/lua-casbin

1. Implementation of Watcher, Watcher ensures policy consistency in multiple Casbin instances.
2. Add cache for g function, refer to: https://github.com/casbin/casbin/blob/master/util/builtin_operators.go#L333.
3. Add AddPermissionsForUser API.
4. Add LoadPolicyArray() to load policy from array
5. Improve performance for enforce().
6. Implement the built-in function keyMatch5.
7. Fixes and refinements to lua-casbin's extensions.

1. Nginx
2. OpenResty
3. Lua
4. Golang (only need to read code)

Jon Lee, Casbin member, Yang Luo, Casbin founder

175 hour

Medium

Port Casbin to Dart, little progress has been made in the project so it's excellent for jumping in early.

The current progress is: https://github.com/casbin/dart-casbin

You will be responsible for the design and making of the Dart port with the help of the mentor, most of Casbin's functionalities should work.

1. Dart
2. Other languages that Casbin is written with.

Tomás Arias, Casbin member

175 hour

Medium

We already have a Swift version Casbin called SwiftCasbin. It already works on all primary OSs, like Windows, Linux, macOS,iOS,tvOS,watchOS. Most of Casbin's functionalities (for example 90%) should work.

The current progress is: https://github.com/casbin/SwiftCasbin

There are still many bugs and missing features in SwiftCasbin. Moreover, we also need to make authz middlewares for any Swift projects:

1. Server-Side like Vapor and adapters for DB.
2. A frontend developer friendly API for UI frameworks like UIKit,SwiftUI.

1. Swift
2. Golang (only need to read code)
3. ios UIkit SwiftUI

Xiaobei, Casbin member, Yang Luo, Casbin founder

175 hour

Medium