Affected by GO-2025-3894 and 9 other vulnerabilities

GO-2025-3894: OpenFGA Authorization Bypass in github.com/openfga/openfga

GO-2025-4150: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-4446: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-4857: OpenFGA has an Authorization Bypass through cached keys in github.com/openfga/openfga

GO-2026-5136: OpenFGA has Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-5170: OpenFGA: Unauthenticated playground endpoint discloses preshared API key in HTML response in github.com/openfga/openfga

GO-2026-5239: OpenFGA has cache-key delimiter injection in shared-iterator and v2 iterator that caches enables intra-store authorization-decision poisoning in github.com/openfga/openfga

GO-2026-5322: OpenFGA Improper Policy Enforcement in github.com/openfga/openfga

GO-2026-5423: OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset in github.com/openfga/openfga

GO-2026-5483: OpenFGA's BatchCheck within-request deduplication produces incorrect authorization decisions via list-value cache-key collision in github.com/openfga/openfga

run

package

v1.9.4 Latest Latest Go to latest Published: Aug 13, 2025 License: Apache-2.0 Imports: 70 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/openfga/openfga

Links

Documentation ¶

Overview ¶

Package run contains the command to run an OpenFGA server.

Index ¶

func NewRunCommand() *cobra.Command
func ReadConfig() (*serverconfig.Config, error)
type ServerContext
- func (s *ServerContext) Run(ctx context.Context, config *serverconfig.Config) error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func NewRunCommand ¶

func NewRunCommand() *cobra.Command

func ReadConfig ¶

func ReadConfig() (*serverconfig.Config, error)

ReadConfig returns the OpenFGA server configuration based on the values provided in the server's 'config.yaml' file. The 'config.yaml' file is loaded from '/etc/openfga', '$HOME/.openfga', or the current working directory. If no configuration file is present, the default values are returned.

Types ¶

type ServerContext ¶ added in v1.3.1

type ServerContext struct {
	Logger logger.Logger
}

func (*ServerContext) Run ¶ added in v1.3.1

func (s *ServerContext) Run(ctx context.Context, config *serverconfig.Config) error

Run returns an error if the server was unable to start successfully. If it started and terminated successfully, it returns a nil error.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL