A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is designed to make it easy for developers to model their application permissions and add and integrate fine-grained authorization into their applications. It allows in-memory data storage for quick development, as well as pluggable database modules. It currently supports PostgreSQL 14, MySQL 8, and SQLite (currently in beta). It offers an HTTP API and a gRPC API. It has SDKs for Java, Node.js/JavaScript, GoLang, Python, and .NET. Look in our Community section for third-party SDKs and tools. It can also be used as a library. OpenFGA takes the best ideas from Google's Zanzibar paper for Relationship-Based Access Control, and also solves problems for Role-based Access Control and Attribute-Based Access Control use cases. The modeling language is powerful enough for engineers, but friendly enough for other stakeholders on your team as well.
Features
- Relationship-based access control made fast, scalable, and easy to use
- OpenFGA will be running at localhost:8080 on your machine
- Learn how to use sample authorization models and create your own with the project’s extensive documentation
- OpenFGA makes it trivial to contribute new SDKs to support your project's language
- Transparency and peer review are important for building secure, stable, and sustainable software
- OpenFGA is designed to answer authorization check calls in milliseconds
Project Samples
