OpenFGA Community

OpenFGA is a high-performance, flexible authorization system based on Google's Zanzibar paper. It enables developers to implement fine-grained access control using a simple, expressive modeling language.

This repository is home to the OpenFGA community resources.

Quick Links

Table of Contents

• Getting Involved
• Governance
• Brand Assets
• Community Projects
  • SDKs, Libraries and Tools
  • AI Tooling
  • Management Applications
  • Integrations
  • IDEs or Editors
  • API Gateways / Proxies
  • Operations
  • Container Images
  • Sample Applications
  • Articles & Videos
• Community Meetings

Getting Involved

• To engage with the OpenFGA Community check the community channels
• To report issues in a repository, use the GitHub Issues section in that repository
• To contribute, check out the contribution guidelines

Governance

Learn about the OpenFGA project's Governance model by reviewing this GOVERNANCE.md file.

Brand Assets

Navigate to the brand-assets folder to find logos and other brand-related assets.

Community Projects

Note: The projects listed below are community-maintained. For official SDKs and tools, see the Official SDKs documentation.

SDKs, Libraries and Tools

AI Tooling that helps with OpenFGA implementation

• OpenFGA Agent Skills
• DeepWiki
• Context7

OpenFGA Management Applications

• OpenFGA Studio
• OpenFGA Admin Console
• OpenFGA Dashboard

Integrations

• Custom Open Policy Agent with prototypical support for OpenFGA
• Keycloak OpenFGA integration
• Keycloak OpenFGA Event Publisher
• Keycloak OpenFGA Custom Event Listener for integrating with OpenFGA via Kafka
• OpenFGA SCIM Bridge
• Implementing ReBAC for Kubernetes with OpenFGA
• OpenFGA Webhook Authorizer for Kubernetes

IDEs or Editors

• Tree Sitter grammar for OpenFGA
• Neovim plugin for OpenFGA modeling language support

API Gateways / Proxies

• Apache APISIX
• Envoy
• Heimdall
• Kong
• Zuplo

Operations

Kubernetes & Infrastructure

• Canonical OpenFGA Operator - A Juju Charm for deploying OpenFGA on Kubernetes
• Kubernetes Operator
• KubeStellar Console - Multi-cluster Kubernetes dashboard with a guided OpenFGA install mission
• Terraform for AWS/Postgres

Container Images

• OpenFGA Rock - OCI image based on Ubuntu built using rockcraft
• ChainGuard image
• Docker Hardened Image

Sample Applications

• Go Google Drive style API
• NextJS Google Drive style Demo
• Flask Demo
• Fine-grained authorization for AI agents using OpenFGA

Articles & Videos

• OpenFGA Modeling Guides
• OpenFGA in Action: Learn how companies and OSS projects are using OpenFGA.
• OpenFGA Community Presentations
• OpenFGA Community Meetings
• OpenFGA for Python Flask Applications
• How to Implement Relationship-Based Access Control (ReBAC) in a Ruby On Rails API?
• Securing data in your Next.js app with Okta and OpenFGA
• OpenFGA for an Express + Typescript Node.js API
• OpenFGA for Spring Boot Applications
• Building a Secure RAG with Python, LangChain, and OpenFGA
• Understanding ReBAC and ABAC Through OpenFGA and Cedar
• Continuous Authorization Testing: FGA, GitHub Actions, and CI/CD
• Using an API Gateway with Fine-Grained Authorization
• Handling the Dual-Write Problem in Distributed Systems

Community Meetings

We hold a monthly meeting to interact with the community, collaborate and receive/provide feedback. You can find more details, including the time, our agenda, and the meeting minutes here.