NestJS Authorization: RBAC, ABAC, claims-based, and more! | NestJS Guards Tutorial

In this video we'll discuss the fundamentals of doing authorization on a NestJS API. We'll take a look at how to use custom decorators to add metadata to controller methods. We'll then work on creating a new guard specifically for authorization. We'll take a look at how to extract a user's roles and determine if they are allowed to process with the request or not. We'll also briefly discuss more advanced scenarios where you might want to use claims-based or perhaps attribute-based (ABAC) authorization techniques using libraries like CASL and accesscontrol.

00:00 - Intro
00:44 - Creating new application
02:08 - Defining User entity and Roles enum
05:37 - Defining our auth requirements
07:33 - Using SetMetadata decorator
08:40 - Creating a custom Roles decorator
10:51 - Creating a new Roles Guard
15:47 - Accessing user roles within a guard
21:08 - Discussing more advanced authorization with claims or permissions/attributes
25:31 - NestJS CASL Integration
25:47 - Outro

[mertefe]

thank you so much... straight to the point.... best nest js explanations i've seen so far.

[connieleung]

very useful. i wish this video was around when my company built a new project in nestjs and rbac last year

[nepdevtech]

thankyou for creating such a great content covering everything making it easy for everyone to understand<3

[cristianescudero]

Thank you for your useful videos. Would be great to have more in deep tutorial about CASL with NestJS.

[AlirezaNasseh]

Great job Marius, your videos are very useful and simple at the same time, keep rocking 🤘

[ceciliaserafini]

You are always so helpful! Thank you Marius! 🤗

[saleumsack]

Thank you, Marius. I'm just switching from making the nodejs API from scratch to using a library like nestjs. This helps me a lot

[oluwatosinsamuel]

Great Stuff once again. Your NestJs content has helped me a lot.

[m-batimel]

thank you for the wonderful explanation! I hope that you will continue to help us

[foofighterdaz]

Thanks (again!) for this content Marius. Would love to see a long-form CASL workshop for managing routes and resources.

[kawthooleidevelopers]

Thanks, bro. Appreciate the video. I was hoping for a GraphQL implementation, but after watching your tutorial, I figured out how to do it.

[HernaW]

Hey, Nice video, thankyou for all these explanations, The CASL video would be nice!

[davialmeida]

thank you! very clear and straightforward

[dgaa]

Once again, thanks for an amazing video! I love to see these videos to get some inspiration!

I would love to see a video about Passport with the Local Strategy together with JWT, I know you have done this but I still feel it would be nice to cover JWT refresh in the backend, and hopefully in the frontend as well.

[miguelacosta]

Great video!!! Thank you for this video

[rickythegermanshepherd]

Great tutorial ❤️. Please make a video implementing casl in nest js. I read the docs but didn't understand properly.

[sergeyagronov]

awesome video, you are just great teacher

[Bilal-lenw]

Thank you, nice straightforward explanation :D now I'm SUBSCRIBED (with the bell ON)
Hope you the best

[NO]

спасибо, как всегда все доходчиво и понятно

[andreicatalin]

Great video Marius, I just watced all the NestJs related videos. You did a very good job, they are very usefull.
Right now I am trying to do a Nestjs authentication trough Firebase auth IDP.
It would be awesome if you will do a video that covers that.