Backend for Frontend

Your application's front door. An API layer behind your reverse proxy — JWT sessions, granular ACL, and transparent forwarding to your microservices.

🛣️

Request Routing

Dynamic route matching with transparent request and response streaming.

📡

Server-Sent Events, authenticated WebSocket upgrades, and streamed HTTP bodies (multipart, binary, long-lived responses).

👤

JWT-based sessions with automatic access token refresh.

🔐

JWT sessions with mid-login challenges (2FA / expired password) delegated to a password service.

🛡️

Role-based access control (RBAC/ACL) validation per route, per property, per condition.

🔑

Granular role-based permissions with field allow-lists, URL scopes, and condition filters.

🌐

Configure and enforce Cross-Origin Resource Sharing policies dynamically without restart.

🎛️

Manage sessions, routes, roles, and ACL from an Angular admin UI.