modelgraph

Mar 23, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Mar 19, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Mar 13, 2026 GO-2026-4857

  GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

Changes in this version

+ const CacheKeyPrefix

+ const DELIMITER

+ var ErrGraphError = errors.New("authorization model graph error")

+ var ErrInvalidModel = errors.New("invalid authorization model encountered")

+ var ErrModelNotFound = errors.New("authorization model not found")

+ func WildcardRelationReference(objectType string) *openfgav1.RelationReference

+ type AuthorizationModelGraph struct

+ func New(model *openfgav1.AuthorizationModel) (*AuthorizationModelGraph, error)

+ func (m *AuthorizationModelGraph) CanApplyRecursion(node *authzGraph.WeightedAuthorizationModelNode, userType string, ...) (*authzGraph.WeightedAuthorizationModelEdge, bool)

+ func (m *AuthorizationModelGraph) FlattenNode(node *authzGraph.WeightedAuthorizationModelNode, userType string, ...) ([]*authzGraph.WeightedAuthorizationModelEdge, error)

+ func (m *AuthorizationModelGraph) GetConditions() map[string]*condition.EvaluableCondition

+ func (m *AuthorizationModelGraph) GetDirectEdgeFromNodeForUserType(objectRelation string, userType string) (*authzGraph.WeightedAuthorizationModelEdge, error)

+ func (m *AuthorizationModelGraph) GetModelID() string

+ type AuthorizationModelGraphResolver struct

+ func NewResolver(datastore storage.AuthorizationModelReadBackend, ...) *AuthorizationModelGraphResolver

+ func (r *AuthorizationModelGraphResolver) Resolve(ctx context.Context, storeID, modelID string) (*AuthorizationModelGraph, error)