Castle of Keys is an interactive game where each character represents a role in the castle — such as King, Cook, or Servant — and tries to access the correct floors of the tower. Access is not hardcoded in the game, but instead defined through a permission API using Permit.io. Each action is validated in real-time based on the role and the configured policies.

The project combines real hardware (such as RFID cards and biometric readers) with externalized authorization logic, offering a gamified experience to understand how permissions work in the real world.

This game was created as part of the API-First Authorization challenge, promoted by dev.to in collaboration with the Permit.io platform.

Sound credit: Medieval available on Pixabay