commands

Jan 28, 2026

Changes in this version

type BatchCheckMetadata

+ DatastoreThrottleCount uint32

+ DispatchThrottleCount uint32

type ListObjectsQueryOption

+ func WithListObjectsBufferSize(value int) ListObjectsQueryOption

+ func WithListObjectsChunkSize(value int) ListObjectsQueryOption

+ func WithListObjectsNumProcs(value int) ListObjectsQueryOption

+ func WithListObjectsPipeExtension(extendAfter time.Duration, maxExtensions int) ListObjectsQueryOption

Dec 4, 2025

Changes in this version

type ListObjectsResolutionMetadata

+ DatastoreThrottled atomic.Bool

+ DispatchThrottled atomic.Bool

Nov 5, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Nov 5, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Nov 4, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type BatchCheckMetadata

+ DatastoreItemCount uint64

type ListObjectsQueryOption

+ func WithFeatureFlagClient(client featureflags.Client) ListObjectsQueryOption

+ func WithListObjectsPipelineEnabled(value bool) ListObjectsQueryOption

type ListObjectsResolutionMetadata

+ DatastoreItemCount atomic.Uint64

Oct 14, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Sep 30, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Sep 22, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Sep 11, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Aug 15, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Aug 13, 2025 GO-2025-3894 +1 more

  GO-2025-3894: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Aug 11, 2025 GO-2025-3894 +1 more

  GO-2025-3894: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type ListObjectsResolutionMetadata

+ CheckCounter atomic.Uint32

Jul 24, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type ListObjectsQueryOption

+ func WithListObjectsUseShadowCache(useShadowCache bool) ListObjectsQueryOption

type ListObjectsResolutionMetadata

+ ShouldRunShadowQuery *atomic.Bool

+ WasWeightedGraphUsed *atomic.Bool

Jul 3, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

+ const ListObjectsShadowExecute

type ListObjectsQueryOption

+ func WithListObjectsOptimizationsEnabled(enabled bool) ListObjectsQueryOption

+ type ListObjectsResolver interface

+ Execute func(ctx context.Context, req *openfgav1.ListObjectsRequest) (*ListObjectsResponse, error)

+ ExecuteStreamed func(ctx context.Context, req *openfgav1.StreamedListObjectsRequest, ...) (*ListObjectsResolutionMetadata, error)

+ func NewListObjectsQueryWithShadowConfig(ds storage.RelationshipTupleReader, checkResolver graph.CheckResolver, ...) (ListObjectsResolver, error)

+ type ShadowListObjectsQueryConfig struct

+ func NewShadowListObjectsQueryConfig(opts ...ShadowListObjectsQueryOption) *ShadowListObjectsQueryConfig

+ type ShadowListObjectsQueryOption func(d *ShadowListObjectsQueryConfig)

+ func WithShadowListObjectsQueryEnabled(enabled bool) ShadowListObjectsQueryOption

+ func WithShadowListObjectsQueryLogger(logger logger.Logger) ShadowListObjectsQueryOption

+ func WithShadowListObjectsQueryMaxDeltaItems(maxDeltaItems int) ShadowListObjectsQueryOption

+ func WithShadowListObjectsQuerySamplePercentage(samplePercentage int) ShadowListObjectsQueryOption

+ func WithShadowListObjectsQueryTimeout(timeout time.Duration) ShadowListObjectsQueryOption

Jun 17, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jun 11, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jun 10, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

May 22, 2025 GO-2025-4150

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type BatchCheckQueryOption

+ func WithBatchCheckDatastoreThrottler(threshold int, duration time.Duration) BatchCheckQueryOption

type CheckQueryOption

+ func WithCheckDatastoreThrottler(threshold int, duration time.Duration) CheckQueryOption

type ListObjectsQueryOption

+ func WithListObjectsDatastoreThrottler(threshold int, duration time.Duration) ListObjectsQueryOption

May 13, 2025 GO-2025-3707 +1 more

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Apr 30, 2025 GO-2025-3707 +1 more

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Apr 29, 2025 GO-2025-3657 +2 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type BatchCheckMetadata

+ DispatchCount uint32

+ ThrottleCount uint32

type ListObjectsQueryOption

+ func WithListObjectsCache(sharedDatastoreResources *shared.SharedDatastoreResources, ...) ListObjectsQueryOption

Apr 1, 2025 GO-2025-3657 +2 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Mar 25, 2025 GO-2025-3657 +2 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Mar 12, 2025 GO-2025-3657 +2 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Feb 20, 2025 GO-2025-3657 +2 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Feb 19, 2025 GO-2025-3657 +2 more

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jan 13, 2025 GO-2025-3470 +3 more

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jan 3, 2025 GO-2025-3470 +3 more

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Dec 13, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type BatchCheckQueryOption

+ func WithBatchCheckCacheOptions(ctrl cachecontroller.CacheController, shouldCache bool, sf *singleflight.Group, ...) BatchCheckQueryOption

type CheckQueryOption

+ func WithCheckCommandCache(serverCtx context.Context, ctrl cachecontroller.CacheController, ...) CheckQueryOption

Dec 5, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type BatchCheckMetadata

+ DuplicateCheckCount int

+ type CacheKey string

Nov 8, 2024 GO-2025-3384 +4 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3707: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

+ type BatchCheckCommandParams struct

+ AuthorizationModelID string

+ Checks []*openfgav1.BatchCheckItem

+ Consistency openfgav1.ConsistencyPreference

+ StoreID string

+ type BatchCheckMetadata struct

+ DatastoreQueryCount uint32

+ type BatchCheckOutcome struct

+ CheckResponse *graph.ResolveCheckResponse

+ Err error

+ type BatchCheckQuery struct

+ func NewBatchCheckCommand(datastore storage.RelationshipTupleReader, checkResolver graph.CheckResolver, ...) *BatchCheckQuery

+ func (bq *BatchCheckQuery) Execute(ctx context.Context, params *BatchCheckCommandParams) (map[CorrelationID]*BatchCheckOutcome, *BatchCheckMetadata, error)

+ type BatchCheckQueryOption func(*BatchCheckQuery)

+ func WithBatchCheckCommandCacheController(cc cachecontroller.CacheController) BatchCheckQueryOption

+ func WithBatchCheckCommandLogger(l logger.Logger) BatchCheckQueryOption

+ func WithBatchCheckMaxChecksPerBatch(maxChecks uint32) BatchCheckQueryOption

+ func WithBatchCheckMaxConcurrentChecks(maxConcurrentChecks uint32) BatchCheckQueryOption

+ type BatchCheckValidationError struct

+ Message string

+ func (e BatchCheckValidationError) Error() string

+ type CorrelationID string

type ReadChangesQueryOption

+ func WithContinuationTokenSerializer(tokenSerializer encoder.ContinuationTokenSerializer) ReadChangesQueryOption

type ReadQueryOption

+ func WithReadQueryTokenSerializer(serializer encoder.ContinuationTokenSerializer) ReadQueryOption

Oct 30, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

+ func CheckCommandErrorToServerError(err error) error

+ type CheckCommandParams struct

+ Consistency openfgav1.ConsistencyPreference

+ Context *structpb.Struct

+ ContextualTuples *openfgav1.ContextualTupleKeys

+ StoreID string

+ TupleKey *openfgav1.CheckRequestTupleKey

type CheckQueryOption

+ func WithCacheController(ctrl cachecontroller.CacheController) CheckQueryOption

+ type InvalidRelationError struct

+ Cause error

+ func (e *InvalidRelationError) Error() string

+ func (e *InvalidRelationError) Unwrap() error

+ type InvalidTupleError struct

+ Cause error

+ func (e *InvalidTupleError) Error() string

+ func (e *InvalidTupleError) Unwrap() error

+ type ThrottledError struct

+ Cause error

+ func (e *ThrottledError) Error() string

+ func (e *ThrottledError) Unwrap() error

Oct 3, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type CheckQuery

+ func NewCheckCommand(datastore storage.RelationshipTupleReader, checkResolver graph.CheckResolver, ...) *CheckQuery

+ type CheckQueryOption func(*CheckQuery)

+ func WithCheckCommandLogger(l logger.Logger) CheckQueryOption

+ func WithCheckCommandMaxConcurrentReads(m uint32) CheckQueryOption

+ func WithCheckCommandResolveNodeLimit(nl uint32) CheckQueryOption

Sep 12, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Aug 30, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

+ var DefaultMaxAssertionSizeInBytes = 64000

Aug 14, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Aug 8, 2024 GO-2024-3061 +4 more

  GO-2024-3061: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jul 26, 2024 GO-2024-3061 +4 more

  GO-2024-3061: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jul 17, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jun 18, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

May 29, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

type ListObjectsQueryOption

+ func WithDispatchThrottlerConfig(config threshold.Config) ListObjectsQueryOption

type ListObjectsResolutionMetadata

+ DispatchCounter *atomic.Uint32

+ WasThrottled *atomic.Bool

May 1, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Apr 16, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Apr 3, 2024 GO-2024-2729 +4 more

  GO-2024-2729: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Mar 20, 2024 GO-2024-2729 +4 more

  GO-2024-2729: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Changes in this version

+ type ListObjectsResolutionMetadata struct

+ DatastoreQueryCount *uint32

+ DispatchCount *uint32

+ func NewListObjectsResolutionMetadata() *ListObjectsResolutionMetadata

type WriteAuthModelOption

+ func WithEnableModularModels(enable bool) WriteAuthModelOption

Mar 1, 2024 GO-2024-2729 +4 more

  GO-2024-2729: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jan 26, 2024 GO-2025-3384 +3 more

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jan 10, 2024 GO-2024-2477 +4 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Jan 4, 2024 GO-2024-2477 +4 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Dec 11, 2023 GO-2024-2477 +4 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

Nov 3, 2023 GO-2024-2477 +3 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

Dec 8, 2023 GO-2024-2477 +3 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

Dec 6, 2023 GO-2024-2477 +3 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

Dec 4, 2023 GO-2024-2477 +3 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3384: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

+ type CreateStoreCmdOption func(*CreateStoreCommand)

+ func WithCreateStoreCmdLogger(l logger.Logger) CreateStoreCmdOption

+ type DeleteStoreCmdOption func(*DeleteStoreCommand)

+ func WithDeleteStoreCmdLogger(l logger.Logger) DeleteStoreCmdOption

+ type ExpandQueryOption func(*ExpandQuery)

+ func WithExpandQueryLogger(l logger.Logger) ExpandQueryOption

+ type GetStoreQueryOption func(*GetStoreQuery)

+ func WithGetStoreQueryLogger(l logger.Logger) GetStoreQueryOption

+ type ListStoresQueryOption func(*ListStoresQuery)

+ func WithListStoresQueryEncoder(e encoder.Encoder) ListStoresQueryOption

+ func WithListStoresQueryLogger(l logger.Logger) ListStoresQueryOption

+ type ReadAssertionsQueryOption func(*ReadAssertionsQuery)

+ func WithReadAssertionsQueryLogger(l logger.Logger) ReadAssertionsQueryOption

+ type ReadAuthModelQueryOption func(*ReadAuthorizationModelQuery)

+ func WithReadAuthModelQueryLogger(l logger.Logger) ReadAuthModelQueryOption

+ type ReadAuthModelsQueryOption func(*ReadAuthorizationModelsQuery)

+ func WithReadAuthModelsQueryEncoder(e encoder.Encoder) ReadAuthModelsQueryOption

+ func WithReadAuthModelsQueryLogger(l logger.Logger) ReadAuthModelsQueryOption

+ type ReadChangesQueryOption func(*ReadChangesQuery)

+ func WithReadChangeQueryHorizonOffset(horizonOffset int) ReadChangesQueryOption

+ func WithReadChangesQueryEncoder(e encoder.Encoder) ReadChangesQueryOption

+ func WithReadChangesQueryLogger(l logger.Logger) ReadChangesQueryOption

+ type ReadQueryOption func(*ReadQuery)

+ func WithReadQueryEncoder(e encoder.Encoder) ReadQueryOption

+ func WithReadQueryLogger(l logger.Logger) ReadQueryOption

+ type WriteAssertionsCmdOption func(*WriteAssertionsCommand)

+ func WithWriteAssertCmdLogger(l logger.Logger) WriteAssertionsCmdOption

+ type WriteAuthModelOption func(*WriteAuthorizationModelCommand)

+ func WithWriteAuthModelEnableConditions(enable bool) WriteAuthModelOption

+ func WithWriteAuthModelLogger(l logger.Logger) WriteAuthModelOption

+ func WithWriteAuthModelMaxSizeInBytes(size int) WriteAuthModelOption

+ type WriteCommandOption func(*WriteCommand)

+ func WithConditionContextByteLimit(limit int) WriteCommandOption

+ func WithWriteCmdEnableConditions(enable bool) WriteCommandOption

+ func WithWriteCmdLogger(l logger.Logger) WriteCommandOption

Nov 7, 2023 GO-2024-2477 +2 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

Nov 6, 2023 GO-2024-2477 +2 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2025-3657: OpenFGA Authorization Bypass in github.com/openfga/openfga

Oct 26, 2023 GO-2024-2477 +1 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Oct 17, 2023 GO-2024-2477 +1 more

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Oct 5, 2023 GO-2023-2121 +2 more

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Sep 26, 2023 GO-2023-2121 +2 more

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

+ type ListObjectsResponse struct

+ Objects []string

+ ResolutionMetadata reverseexpand.ResolutionMetadata

Aug 25, 2023 GO-2023-2084 +3 more

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

type ListObjectsQueryOption

+ func WithCheckOptions(checkOptions []graph.LocalCheckerOption) ListObjectsQueryOption

Aug 1, 2023 GO-2023-2028 +4 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

type ListObjectsQuery

+ func NewListObjectsQuery(ds storage.RelationshipTupleReader, opts ...ListObjectsQueryOption) *ListObjectsQuery

+ type ListObjectsQueryOption func(d *ListObjectsQuery)

+ func WithListObjectsDeadline(deadline time.Duration) ListObjectsQueryOption

+ func WithListObjectsMaxResults(max uint32) ListObjectsQueryOption

+ func WithLogger(l logger.Logger) ListObjectsQueryOption

+ func WithMaxConcurrentReads(max uint32) ListObjectsQueryOption

+ func WithResolveNodeBreadthLimit(limit uint32) ListObjectsQueryOption

+ func WithResolveNodeLimit(limit uint32) ListObjectsQueryOption

Jun 30, 2023 GO-2023-2028 +4 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

+ type ConditionalResultStatus int

+ const NoFurtherEvalStatus

+ const RequiresFurtherEvalStatus

+ type ConnectedObjectsResult struct

+ Object string

+ ResultStatus ConditionalResultStatus

type ListObjectsQuery

+ CheckConcurrencyLimit uint32

Jun 27, 2023 GO-2023-2028 +4 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Jun 22, 2023 GO-2023-2028 +4 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Jun 7, 2023 GO-2023-2028 +4 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Jun 26, 2023 GO-2023-2028 +4 more

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

+ type ListObjectsResult struct

+ Err error

+ ObjectID string

May 17, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

type ConnectedObjectsRequest

+ Typesystem *typesystem.TypeSystem

Apr 18, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Apr 14, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Apr 12, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Mar 17, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Mar 16, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Mar 15, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

+ var ErrObsoleteAuthorizationModel = errors.New("obsolete authorization model schema version")

+ func ProhibitModel1_0(schema string, allowModel1_0 bool) bool

Feb 22, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Feb 16, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Feb 15, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

type ListObjectsQuery

+ CheckResolver graph.CheckResolver

type UserRefObject

+ func (u *UserRefObject) String() string

type UserRefObjectRelation

+ func (u *UserRefObjectRelation) String() string

type UserRefTypedWildcard

+ func (u *UserRefTypedWildcard) String() string

Feb 3, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Jan 31, 2023 GO-2023-1872 +5 more

  GO-2023-1872: Denial of service in github.com/openfga/openfga

  GO-2023-2028: OpenFGA Authorization Bypass in github.com/openfga/openfga

  GO-2023-2084: OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga

  GO-2023-2121: OpenFGA DoS vulnerability in github.com/openfga/openfga

  GO-2024-2477: OpenFGA denial of service in github.com/openfga/openfga

  GO-2025-3470: OpenFGA Authorization Bypass in github.com/openfga/openfga

Changes in this version

+ const IndirectWriteErrorReason

+ type CheckQuery struct

+ func NewCheckQuery(datastore storage.OpenFGADatastore, t trace.Tracer, m metric.Meter, ...) *CheckQuery

+ func (q *CheckQuery) Execute(ctx context.Context, req *openfgapb.CheckRequest) (*openfgapb.CheckResponse, error)

+ type ConnectedObjectsCommand struct

+ Datastore storage.OpenFGADatastore

+ Limit uint32

+ ResolveNodeLimit uint32

+ Typesystem *typesystem.TypeSystem

+ func (c *ConnectedObjectsCommand) StreamedConnectedObjects(ctx context.Context, req *ConnectedObjectsRequest, resultChan chan<- string) error

+ type ConnectedObjectsRequest struct

+ ContextualTuples []*openfgapb.TupleKey

+ ObjectType string

+ Relation string

+ StoreID string

+ User isUserRef

+ type CreateStoreCommand struct

+ func NewCreateStoreCommand(storesBackend storage.StoresBackend, logger logger.Logger) *CreateStoreCommand

+ func (s *CreateStoreCommand) Execute(ctx context.Context, req *openfgapb.CreateStoreRequest) (*openfgapb.CreateStoreResponse, error)

+ type DeleteStoreCommand struct

+ func NewDeleteStoreCommand(storesBackend storage.StoresBackend, logger logger.Logger) *DeleteStoreCommand

+ func (s *DeleteStoreCommand) Execute(ctx context.Context, req *openfgapb.DeleteStoreRequest) (*openfgapb.DeleteStoreResponse, error)

+ type ExpandQuery struct

+ func NewExpandQuery(datastore storage.OpenFGADatastore, tracer trace.Tracer, logger logger.Logger) *ExpandQuery

+ func (q *ExpandQuery) Execute(ctx context.Context, req *openfgapb.ExpandRequest) (*openfgapb.ExpandResponse, error)

+ type GetStoreQuery struct

+ func NewGetStoreQuery(storesBackend storage.StoresBackend, logger logger.Logger) *GetStoreQuery

+ func (q *GetStoreQuery) Execute(ctx context.Context, req *openfgapb.GetStoreRequest) (*openfgapb.GetStoreResponse, error)

+ type ListObjectsQuery struct

+ ConnectedObjects func(ctx context.Context, req *ConnectedObjectsRequest, results chan<- string) error

+ Datastore storage.OpenFGADatastore

+ ListObjectsDeadline time.Duration

+ ListObjectsMaxResults uint32

+ Logger logger.Logger

+ Meter metric.Meter

+ ResolveNodeLimit uint32

+ Tracer trace.Tracer

+ func (q *ListObjectsQuery) Execute(ctx context.Context, req *openfgapb.ListObjectsRequest) (*openfgapb.ListObjectsResponse, error)

+ func (q *ListObjectsQuery) ExecuteStreamed(ctx context.Context, req *openfgapb.StreamedListObjectsRequest, ...) error

+ type ListStoresQuery struct

+ func NewListStoresQuery(storesBackend storage.StoresBackend, logger logger.Logger, ...) *ListStoresQuery

+ func (q *ListStoresQuery) Execute(ctx context.Context, req *openfgapb.ListStoresRequest) (*openfgapb.ListStoresResponse, error)

+ type ReadAssertionsQuery struct

+ func NewReadAssertionsQuery(backend storage.AssertionsBackend, logger logger.Logger) *ReadAssertionsQuery

+ func (q *ReadAssertionsQuery) Execute(ctx context.Context, store, authorizationModelID string) (*openfgapb.ReadAssertionsResponse, error)

+ type ReadAuthorizationModelQuery struct

+ func NewReadAuthorizationModelQuery(backend storage.AuthorizationModelReadBackend, logger logger.Logger) *ReadAuthorizationModelQuery

+ func (q *ReadAuthorizationModelQuery) Execute(ctx context.Context, req *openfgapb.ReadAuthorizationModelRequest) (*openfgapb.ReadAuthorizationModelResponse, error)

+ type ReadAuthorizationModelsQuery struct

+ func NewReadAuthorizationModelsQuery(backend storage.AuthorizationModelReadBackend, logger logger.Logger, ...) *ReadAuthorizationModelsQuery

+ func (q *ReadAuthorizationModelsQuery) Execute(ctx context.Context, req *openfgapb.ReadAuthorizationModelsRequest) (*openfgapb.ReadAuthorizationModelsResponse, error)

+ type ReadChangesQuery struct

+ func NewReadChangesQuery(backend storage.ChangelogBackend, tracer trace.Tracer, logger logger.Logger, ...) *ReadChangesQuery

+ func (q *ReadChangesQuery) Execute(ctx context.Context, req *openfgapb.ReadChangesRequest) (*openfgapb.ReadChangesResponse, error)

+ type ReadQuery struct

+ func NewReadQuery(datastore storage.OpenFGADatastore, tracer trace.Tracer, logger logger.Logger, ...) *ReadQuery

+ func (q *ReadQuery) Execute(ctx context.Context, req *openfgapb.ReadRequest) (*openfgapb.ReadResponse, error)

+ type UserRef struct

+ Ref isUserRef

+ type UserRefObject struct

+ Object *openfgapb.Object

+ func (u *UserRefObject) GetObjectType() string

+ type UserRefObjectRelation struct

+ ObjectRelation *openfgapb.ObjectRelation

+ func (u *UserRefObjectRelation) GetObjectType() string

+ type UserRefTypedWildcard struct

+ Type string

+ func (u *UserRefTypedWildcard) GetObjectType() string

+ type WriteAssertionsCommand struct

+ func NewWriteAssertionsCommand(datastore storage.OpenFGADatastore, logger logger.Logger) *WriteAssertionsCommand

+ func (w *WriteAssertionsCommand) Execute(ctx context.Context, req *openfgapb.WriteAssertionsRequest) (*openfgapb.WriteAssertionsResponse, error)

+ type WriteAuthorizationModelCommand struct

+ func NewWriteAuthorizationModelCommand(backend storage.TypeDefinitionWriteBackend, logger logger.Logger) *WriteAuthorizationModelCommand

+ func (w *WriteAuthorizationModelCommand) Execute(ctx context.Context, req *openfgapb.WriteAuthorizationModelRequest) (*openfgapb.WriteAuthorizationModelResponse, error)

+ type WriteCommand struct

+ func NewWriteCommand(datastore storage.OpenFGADatastore, tracer trace.Tracer, logger logger.Logger) *WriteCommand

+ func (c *WriteCommand) Execute(ctx context.Context, req *openfgapb.WriteRequest) (*openfgapb.WriteResponse, error)