Chances are your application's authorization is quite al dente — a controlled mess. I've built bad authorization systems one too many times.
I now want to share my learnings and my solution: Kilpi, an open source authorization framework for TypeScript applications.