Affected by GO-2026-4857 and 6 other vulnerabilities

GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

GO-2026-5136: OpenFGA has Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-5170: OpenFGA: Unauthenticated playground endpoint discloses preshared API key in HTML response in github.com/openfga/openfga

GO-2026-5239: OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning in github.com/openfga/openfga

GO-2026-5322: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-5423: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset in github.com/openfga/openfga

GO-2026-5483: OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision in github.com/openfga/openfga

eval

package

v1.11.5 Latest Latest Go to latest Published: Feb 11, 2026 License: Apache-2.0 Imports: 13 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/openfga/openfga

Links

Documentation ¶

Index ¶

func EvaluateTupleCondition(ctx context.Context, tupleKey *openfgav1.TupleKey, ...) (bool, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func EvaluateTupleCondition ¶

func EvaluateTupleCondition(
	ctx context.Context,
	tupleKey *openfgav1.TupleKey,
	evaluableCondition *condition.EvaluableCondition,
	context *structpb.Struct,
) (bool, error)

EvaluateTupleCondition looks at the given tuple's condition and returns an evaluation result for the given context. If the tuple doesn't have a condition, it exits early and doesn't create a span. If the tuple's condition isn't found in the model it returns an EvaluationError.

Types ¶

This section is empty.

Source Files ¶

View all Source files

eval.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL