I've been working a light-weight API gateway for dev use that supports auth and RBAC

https://github.com/paul-callahan/tiny-gateway