OpenFGA Community
March 18, 2026 ยท View on GitHub
OpenFGA is a high-performance, flexible authorization system based on Google's Zanzibar paper. It enables developers to implement fine-grained access control using a simple, expressive modeling language.
This repository is home to the OpenFGA community resources.
Quick Links
| Resource | Description |
|---|---|
| Documentation | Learn about OpenFGA concepts and usage |
| Playground | Try OpenFGA models in your browser |
| Official SDKs | SDKs for JS, Go, .NET, Python, Java |
| Community | Get involved in the OpenFGA community |
| Roadmap | See what's coming next |
Table of Contents
Getting Involved
- To engage with the OpenFGA Community check the community channels
- To report issues in a repository, use the GitHub Issues section in that repository
- To contribute, check out the contribution guidelines
Governance
Learn about the OpenFGA project's Governance model by reviewing this GOVERNANCE.md file.
Brand Assets
Navigate to the brand-assets folder to find logos and other brand-related assets.
Community Projects
Note: The projects listed below are community-maintained. For official SDKs and tools, see the Official SDKs documentation.
SDKs, Libraries and Tools
| Project | Language/Framework |
|---|---|
| OpenFGA ASP.NET Core + Worker Services SDK | .NET |
| OpenFGA Dart SDK | Dart |
| OpenFGA Elixir SDK | Elixir |
| OpenFGA PHP SDK | PHP |
| OpenFGA Ruby SDK | Ruby |
| OpenFGA Rust SDK | Rust |
| Canonical OpenFGA Library | Go |
| Openlane OpenFGA Extensions | Go |
| A middleware to secure routes in Fiber | Go (Fiber) |
| Official Quarkus extension for OpenFGA | Java (Quarkus) |
| Official Quarkus Zanzibar support | Java (Quarkus) |
| Benchmarking & Load Testing with k6 | Testing |
| OpenFGA Tuple Manager | Tool |
| Tuna - Tuple Generator for OpenFGA | Tool |
| Postman Collection | Tool |
AI Tooling that helps with OpenFGA implementation
OpenFGA Management Applications
Integrations
- Custom Open Policy Agent with prototypical support for OpenFGA
- Keycloak OpenFGA integration
- Keycloak OpenFGA Event Publisher
- Keycloak OpenFGA Custom Event Listener for integrating with OpenFGA via Kafka
- OpenFGA SCIM Bridge
- Implementing ReBAC for Kubernetes with OpenFGA
- OpenFGA Webhook Authorizer for Kubernetes
IDEs or Editors
API Gateways / Proxies
Operations
Kubernetes & Infrastructure
- Canonical OpenFGA Operator - A Juju Charm for deploying OpenFGA on Kubernetes
- Kubernetes Operator
- KubeStellar Console - Multi-cluster Kubernetes dashboard with a guided OpenFGA install mission
- Terraform for AWS/Postgres
Container Images
- OpenFGA Rock - OCI image based on Ubuntu built using rockcraft
- ChainGuard image
- Docker Hardened Image
Sample Applications
- Go Google Drive style API
- NextJS Google Drive style Demo
- Flask Demo
- Fine-grained authorization for AI agents using OpenFGA
Articles & Videos
- OpenFGA Modeling Guides
- OpenFGA in Action: Learn how companies and OSS projects are using OpenFGA.
- OpenFGA Community Presentations
- OpenFGA Community Meetings
- OpenFGA for Python Flask Applications
- How to Implement Relationship-Based Access Control (ReBAC) in a Ruby On Rails API?
- Securing data in your Next.js app with Okta and OpenFGA
- OpenFGA for an Express + Typescript Node.js API
- OpenFGA for Spring Boot Applications
- Building a Secure RAG with Python, LangChain, and OpenFGA
- Understanding ReBAC and ABAC Through OpenFGA and Cedar
- Continuous Authorization Testing: FGA, GitHub Actions, and CI/CD
- Using an API Gateway with Fine-Grained Authorization
- Handling the Dual-Write Problem in Distributed Systems
Community Meetings
We hold a monthly meeting to interact with the community, collaborate and receive/provide feedback. You can find more details, including the time, our agenda, and the meeting minutes here.