umacs 0.7.2

UMACS is a unified management and access control service.

UMACS User Management and Access Control Service

UMACS (User Management and Access Control Service) is a lightweight, reusable Authorization service.

Features

• Policy Engine based on Casbin for flexible access control, supporting RBAC and ABAC.
• Logging using SQL tables for efficient storage and auditing of decision logs.
• JWKS discovery + caching for validating tokens from configured IdPs and rejecting invalid tokens.
• API for managing users, roles, and permissions.

Core Dependencies

The service is built using:

• FastAPI + Uvicorn
• Authlib (OIDC JWT verification)
• Casbin (RBAC + optional ABAC)
• SQLModel + AsyncSQLAlchemy (Policies, Users, Resources, Decision Logs)
• Alembic (Database Migrations)

Quickstart

Prerequisites

Environment

Create a .env file based on .env.example.

Database Setup

Run migrations to set up the SQL database:

uv run alembic upgrade head

Install and run (using uv):

uv sync
uv run fastapi dev