GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

obj

package

v1.13.0 Latest Latest Go to latest Published: Mar 23, 2026 License: Apache-2.0 Imports: 12 Imported by: 0

Details

This section is empty.

This section is empty.

func CombineValidators[T any](validators []func(T) (bool, error)) func(T) (bool, error)

func MakeFallible[T, U any](fn func(T) U) func(T) (U, error)

func NewValidator(
	ctx context.Context,
	ts *typesystem.TypeSystem,
	obj *structpb.Struct,
) func(*openfgav1.TupleKey) (bool, error)

type Option func(o *Reader)

func WithConsistency(pref openfgav1.ConsistencyPreference) Option

func WithValidator(fn func(*openfgav1.TupleKey) (bool, error)) Option

type Reader struct {
	// contains filtered or unexported fields
}

func NewReader(
	store storage.RelationshipTupleReader,
	storeID string,
	opts ...Option,
) *Reader

func (r *Reader) Read(
	ctx context.Context,
	q pipeline.ObjectQuery,
) iter.Seq[pipeline.Item]