server

Apr 27, 2026

Changes in this version

type OpenFGAServiceV1Option

+ func WithCacheTTLJitterPercentage(pct uint32) OpenFGAServiceV1Option

Apr 10, 2026

Changes in this version

type OpenFGAServiceV1Option

+ func WithAuthzenBaseURL(baseURL string) OpenFGAServiceV1Option

Mar 23, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type Server

+ func (s *Server) ActionSearch(ctx context.Context, req *authzenv1.ActionSearchRequest) (*authzenv1.ActionSearchResponse, error)

+ func (s *Server) Evaluation(ctx context.Context, req *authzenv1.EvaluationRequest) (*authzenv1.EvaluationResponse, error)

+ func (s *Server) Evaluations(ctx context.Context, req *authzenv1.EvaluationsRequest) (*authzenv1.EvaluationsResponse, error)

+ func (s *Server) GetConfiguration(ctx context.Context, req *authzenv1.GetConfigurationRequest) (*authzenv1.GetConfigurationResponse, error)

+ func (s *Server) IsAuthZenEnabled(storeID string) bool

+ func (s *Server) ResourceSearch(ctx context.Context, req *authzenv1.ResourceSearchRequest) (*authzenv1.ResourceSearchResponse, error)

+ func (s *Server) SubjectSearch(ctx context.Context, req *authzenv1.SubjectSearchRequest) (*authzenv1.SubjectSearchResponse, error)

Mar 19, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Mar 13, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Feb 23, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithListObjectsPipelineEnabled(enabled bool) OpenFGAServiceV1Option

Feb 11, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Feb 10, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithCheckCache(c storage.InMemoryCache[any]) OpenFGAServiceV1Option

+ func WithListObjectsBufferCapacity(value int) OpenFGAServiceV1Option

Jan 28, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithListObjectsBufferSize(value int) OpenFGAServiceV1Option

+ func WithListObjectsChunkSize(value int) OpenFGAServiceV1Option

+ func WithListObjectsNumProcs(value int) OpenFGAServiceV1Option

+ func WithListObjectsPipeExtension(extendAfter time.Duration, maxExtensions int) OpenFGAServiceV1Option

+ func WithReadChangesMaxPageSize(max uint32) OpenFGAServiceV1Option

+ func WithTypesystemCacheSize(maxTypesystemCacheSize int) OpenFGAServiceV1Option

Dec 4, 2025 GO-2026-4446 +1 more

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Nov 20, 2025 GO-2026-4446 +1 more

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Nov 5, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Nov 5, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Nov 4, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithFeatureFlagClient(client featureflags.Client) OpenFGAServiceV1Option

Oct 14, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Sep 30, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithRequestTimeout(timeout time.Duration) OpenFGAServiceV1Option

Sep 22, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Sep 11, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithPlanner(planner *planner.Planner) OpenFGAServiceV1Option

+ func WithShadowCheckCacheEnabled(enabled bool) OpenFGAServiceV1Option

Aug 15, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Aug 13, 2025 GO-2025-3894 +3 more

  GO-2025-3894: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Aug 11, 2025 GO-2025-3894 +3 more

  GO-2025-3894: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jul 24, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jul 3, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithShadowListObjectsQueryEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithShadowListObjectsQueryMaxDeltaItems(maxDeltaItems int) OpenFGAServiceV1Option

+ func WithShadowListObjectsQuerySamplePercentage(rate int) OpenFGAServiceV1Option

+ func WithShadowListObjectsQueryTimeout(threshold time.Duration) OpenFGAServiceV1Option

Jun 17, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jun 11, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jun 10, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

May 22, 2025 GO-2025-4150 +2 more

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithCheckDatabaseThrottle(threshold int, duration time.Duration) OpenFGAServiceV1Option

+ func WithListObjectsDatabaseThrottle(threshold int, duration time.Duration) OpenFGAServiceV1Option

+ func WithListUsersDatabaseThrottle(threshold int, duration time.Duration) OpenFGAServiceV1Option

+ func WithSharedIteratorTTL(ttl time.Duration) OpenFGAServiceV1Option

May 13, 2025 GO-2025-3707 +3 more

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithSharedIteratorEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithSharedIteratorLimit(limit uint32) OpenFGAServiceV1Option

Apr 30, 2025 GO-2025-3707 +3 more

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Apr 29, 2025 GO-2025-3657 +4 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithListObjectsIteratorCacheEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithListObjectsIteratorCacheMaxResults(limit uint32) OpenFGAServiceV1Option

+ func WithListObjectsIteratorCacheTTL(ttl time.Duration) OpenFGAServiceV1Option

Apr 1, 2025 GO-2025-3657 +4 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type ExperimentalFeatureFlag

+ const ExperimentalListObjectsOptimizations

type OpenFGAServiceV1Option

+ func WithShadowListObjectsCheckResolverEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithShadowListObjectsCheckResolverSamplePercentage(rate int) OpenFGAServiceV1Option

+ func WithShadowListObjectsCheckResolverTimeout(threshold time.Duration) OpenFGAServiceV1Option

Mar 25, 2025 GO-2025-3657 +4 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithShadowCheckResolverEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithShadowCheckResolverSamplePercentage(rate int) OpenFGAServiceV1Option

+ func WithShadowCheckResolverTimeout(threshold time.Duration) OpenFGAServiceV1Option

Mar 12, 2025 GO-2025-3657 +4 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Feb 20, 2025 GO-2025-3657 +4 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Feb 19, 2025 GO-2025-3657 +4 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jan 13, 2025 GO-2025-3470 +4 more

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jan 3, 2025 GO-2025-3470 +4 more

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Dec 13, 2024 GO-2025-3384 +5 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Dec 5, 2024 GO-2025-3384 +5 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithCheckCacheLimit(limit uint32) OpenFGAServiceV1Option

+ func WithCheckIteratorCacheTTL(ttl time.Duration) OpenFGAServiceV1Option

Nov 8, 2024 GO-2025-3384 +5 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithContextPropagationToDatastore(enable bool) OpenFGAServiceV1Option

+ func WithContinuationTokenSerializer(ds encoder.ContinuationTokenSerializer) OpenFGAServiceV1Option

+ func WithMaxChecksPerBatchCheck(maxChecks uint32) OpenFGAServiceV1Option

+ func WithMaxConcurrentChecksPerBatchCheck(maxConcurrentChecks uint32) OpenFGAServiceV1Option

type Server

+ func (s *Server) BatchCheck(ctx context.Context, req *openfgav1.BatchCheckRequest) (*openfgav1.BatchCheckResponse, error)

Oct 30, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type ExperimentalFeatureFlag

+ const ExperimentalAccessControlParams

+ const ExperimentalCheckOptimizations

type OpenFGAServiceV1Option

+ func WithAccessControlParams(enabled bool, storeID string, modelID string, authnMethod string) OpenFGAServiceV1Option

+ func WithCacheControllerEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithCacheControllerTTL(ttl time.Duration) OpenFGAServiceV1Option

+ func WithCacheLimit(limit uint32) OpenFGAServiceV1Option

+ func WithCheckIteratorCacheEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithCheckIteratorCacheMaxResults(limit uint32) OpenFGAServiceV1Option

type Server

+ AccessControl serverconfig.AccessControlConfig

+ AuthnMethod string

+ func (s *Server) IsAccessControlEnabled() bool

Oct 3, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Sep 12, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Aug 30, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Aug 14, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Aug 8, 2024 GO-2024-3061 +5 more

  GO-2024-3061: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithCheckTrackerEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithContext(ctx context.Context) OpenFGAServiceV1Option

+ func WithListUsersDispatchThrottlingEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithListUsersDispatchThrottlingFrequency(frequency time.Duration) OpenFGAServiceV1Option

+ func WithListUsersDispatchThrottlingMaxThreshold(maxThreshold uint32) OpenFGAServiceV1Option

+ func WithListUsersDispatchThrottlingThreshold(threshold uint32) OpenFGAServiceV1Option

+ func WithUsersetBatchSize(usersetBatchSize uint32) OpenFGAServiceV1Option

Jul 26, 2024 GO-2024-3061 +5 more

  GO-2024-3061: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type ExperimentalFeatureFlag

+ const ExperimentalEnableConsistencyParams

Jul 17, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jun 18, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

May 29, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type ExperimentalFeatureFlag

+ const ExperimentalEnableListUsers

type OpenFGAServiceV1Option

+ func WithAuthorizationModelCacheSize(maxAuthorizationModelCacheSize int) OpenFGAServiceV1Option

+ func WithDispatchThrottlingCheckResolverMaxThreshold(maxThreshold uint32) OpenFGAServiceV1Option

+ func WithListObjectsDispatchThrottlingEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithListObjectsDispatchThrottlingFrequency(frequency time.Duration) OpenFGAServiceV1Option

+ func WithListObjectsDispatchThrottlingMaxThreshold(maxThreshold uint32) OpenFGAServiceV1Option

+ func WithListObjectsDispatchThrottlingThreshold(threshold uint32) OpenFGAServiceV1Option

+ func WithListUsersDeadline(deadline time.Duration) OpenFGAServiceV1Option

+ func WithListUsersMaxResults(limit uint32) OpenFGAServiceV1Option

+ func WithMaxConcurrentReadsForListUsers(max uint32) OpenFGAServiceV1Option

type Server

+ func (s *Server) IsExperimentallyEnabled(flag ExperimentalFeatureFlag) bool

+ func (s *Server) ListUsers(ctx context.Context, req *openfgav1.ListUsersRequest) (*openfgav1.ListUsersResponse, error)

May 1, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Apr 16, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Apr 3, 2024 GO-2024-2729 +5 more

  GO-2024-2729: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Mar 20, 2024 GO-2024-2729 +5 more

  GO-2024-2729: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type ExperimentalFeatureFlag

+ const ExperimentalEnableModularModels

type OpenFGAServiceV1Option

+ func WithDispatchThrottlingCheckResolverEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithDispatchThrottlingCheckResolverFrequency(frequency time.Duration) OpenFGAServiceV1Option

+ func WithDispatchThrottlingCheckResolverThreshold(threshold uint32) OpenFGAServiceV1Option

+ func WithRequestDurationByDispatchCountHistogramBuckets(buckets []uint) OpenFGAServiceV1Option

Mar 1, 2024 GO-2024-2729 +5 more

  GO-2024-2729: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jan 26, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type Server

+ func (s *Server) Close()

Jan 10, 2024 GO-2024-2477 +5 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jan 4, 2024 GO-2024-2477 +5 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Dec 11, 2023 GO-2024-2477 +5 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Nov 3, 2023 GO-2024-2477 +4 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Dec 8, 2023 GO-2024-2477 +4 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Dec 6, 2023 GO-2024-2477 +4 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Dec 4, 2023 GO-2024-2477 +4 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type ExperimentalFeatureFlag

+ const ExperimentalEnableConditions

Nov 7, 2023 GO-2024-2477 +3 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Nov 6, 2023 GO-2024-2477 +3 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Oct 26, 2023 GO-2024-2477 +2 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Oct 17, 2023 GO-2024-2477 +2 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Oct 5, 2023 GO-2023-2121 +3 more

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type OpenFGAServiceV1Option

+ func WithMaxAuthorizationModelSizeInBytes(size int) OpenFGAServiceV1Option

Sep 26, 2023 GO-2023-2121 +3 more

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Aug 25, 2023 GO-2023-2084 +4 more

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type ExperimentalFeatureFlag

+ const ExperimentalCheckQueryCache

type OpenFGAServiceV1Option

+ func WithCheckQueryCacheEnabled(enabled bool) OpenFGAServiceV1Option

+ func WithCheckQueryCacheLimit(limit uint32) OpenFGAServiceV1Option

+ func WithCheckQueryCacheTTL(ttl time.Duration) OpenFGAServiceV1Option

+ func WithRequestDurationByQueryHistogramBuckets(buckets []uint) OpenFGAServiceV1Option

Aug 1, 2023 GO-2023-2028 +5 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

+ type OpenFGAServiceV1Option func(s *Server)

+ func WithChangelogHorizonOffset(offset int) OpenFGAServiceV1Option

+ func WithDatastore(ds storage.OpenFGADatastore) OpenFGAServiceV1Option

+ func WithExperimentals(experimentals ...ExperimentalFeatureFlag) OpenFGAServiceV1Option

+ func WithListObjectsDeadline(deadline time.Duration) OpenFGAServiceV1Option

+ func WithListObjectsMaxResults(limit uint32) OpenFGAServiceV1Option

+ func WithLogger(l logger.Logger) OpenFGAServiceV1Option

+ func WithMaxConcurrentReadsForCheck(max uint32) OpenFGAServiceV1Option

+ func WithMaxConcurrentReadsForListObjects(max uint32) OpenFGAServiceV1Option

+ func WithResolveNodeBreadthLimit(limit uint32) OpenFGAServiceV1Option

+ func WithResolveNodeLimit(limit uint32) OpenFGAServiceV1Option

+ func WithTokenEncoder(encoder encoder.Encoder) OpenFGAServiceV1Option

+ func WithTransport(t gateway.Transport) OpenFGAServiceV1Option

type Server

+ func MustNewServerWithOpts(opts ...OpenFGAServiceV1Option) *Server

+ func NewServerWithOpts(opts ...OpenFGAServiceV1Option) (*Server, error)

Jun 30, 2023 GO-2023-2028 +5 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jun 27, 2023 GO-2023-2028 +5 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jun 22, 2023 GO-2023-2028 +5 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jun 7, 2023 GO-2023-2028 +5 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Jun 26, 2023 GO-2023-2028 +5 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

May 17, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Apr 18, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Apr 14, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Apr 12, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Mar 17, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Mar 16, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Mar 15, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

type Config

+ AllowEvaluating1_0Models bool

+ AllowWriting1_0Models bool

Feb 22, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Feb 16, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Feb 15, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Feb 3, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

+ const AuthorizationModelIDTraceTag

Jan 31, 2023 GO-2023-1872 +6 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

+ const AuthorizationModelIDHeader

+ type Config struct

+ ChangelogHorizonOffset int

+ Experimentals []ExperimentalFeatureFlag

+ ListObjectsDeadline time.Duration

+ ListObjectsMaxResults uint32

+ ResolveNodeLimit uint32

+ type Dependencies struct

+ Datastore storage.OpenFGADatastore

+ Logger logger.Logger

+ Meter metric.Meter

+ TokenEncoder encoder.Encoder

+ Tracer trace.Tracer

+ Transport gateway.Transport

+ type ExperimentalFeatureFlag string

+ type Server struct

+ func New(dependencies *Dependencies, config *Config) *Server

+ func (s *Server) Check(ctx context.Context, req *openfgapb.CheckRequest) (*openfgapb.CheckResponse, error)

+ func (s *Server) CreateStore(ctx context.Context, req *openfgapb.CreateStoreRequest) (*openfgapb.CreateStoreResponse, error)

+ func (s *Server) DeleteStore(ctx context.Context, req *openfgapb.DeleteStoreRequest) (*openfgapb.DeleteStoreResponse, error)

+ func (s *Server) Expand(ctx context.Context, req *openfgapb.ExpandRequest) (*openfgapb.ExpandResponse, error)

+ func (s *Server) GetStore(ctx context.Context, req *openfgapb.GetStoreRequest) (*openfgapb.GetStoreResponse, error)

+ func (s *Server) IsReady(ctx context.Context) (bool, error)

+ func (s *Server) ListObjects(ctx context.Context, req *openfgapb.ListObjectsRequest) (*openfgapb.ListObjectsResponse, error)

+ func (s *Server) ListStores(ctx context.Context, req *openfgapb.ListStoresRequest) (*openfgapb.ListStoresResponse, error)

+ func (s *Server) Read(ctx context.Context, req *openfgapb.ReadRequest) (*openfgapb.ReadResponse, error)

+ func (s *Server) ReadAssertions(ctx context.Context, req *openfgapb.ReadAssertionsRequest) (*openfgapb.ReadAssertionsResponse, error)

+ func (s *Server) ReadAuthorizationModel(ctx context.Context, req *openfgapb.ReadAuthorizationModelRequest) (*openfgapb.ReadAuthorizationModelResponse, error)

+ func (s *Server) ReadAuthorizationModels(ctx context.Context, req *openfgapb.ReadAuthorizationModelsRequest) (*openfgapb.ReadAuthorizationModelsResponse, error)

+ func (s *Server) ReadChanges(ctx context.Context, req *openfgapb.ReadChangesRequest) (*openfgapb.ReadChangesResponse, error)

+ func (s *Server) ReadTuples(ctx context.Context, req *openfgapb.ReadTuplesRequest) (*openfgapb.ReadTuplesResponse, error)

+ func (s *Server) StreamedListObjects(req *openfgapb.StreamedListObjectsRequest, ...) error

+ func (s *Server) Write(ctx context.Context, req *openfgapb.WriteRequest) (*openfgapb.WriteResponse, error)

+ func (s *Server) WriteAssertions(ctx context.Context, req *openfgapb.WriteAssertionsRequest) (*openfgapb.WriteAssertionsResponse, error)

+ func (s *Server) WriteAuthorizationModel(ctx context.Context, req *openfgapb.WriteAuthorizationModelRequest) (*openfgapb.WriteAuthorizationModelResponse, error)