fine-grained-authorization

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

A curated list of information and resources about authorization.

Official command-line tool for managing SpiceDB

Keycloak integration with OpenFGA (based on Zanzibar) for Fine-Grained Authorization at Scale (ReBAC)

OpenFGA SDK for Go.

An awesome list for the SpiceDB ecosystem 😎

Kubernetes controller for managing instances of SpiceDB

A cross-platform CLI to interact with an OpenFGA server.

Official SpiceDB client library for Go

🔐 Lightning fast, global scale authorization service without the overhead of a yet another DSL.

OpenFGA-to-PostgreSQL authorization compiler. Generates specialized SQL functions from .fga schemas that query your existing tables. Zero sync, always consistent.

OpenFGA SDK for node.js and JavaScript

Google's Zanzibar paper annotated for folks outside of Google

OpenFGA SDK for Python 3

OpenFGA SDK for .NET

A collection of examples for SpiceDB users

Fine-grained authorization for AI agents using OpenFGA.