Modernizing Authorization for Cloud Native Applications Using OpenFGA
summary
Demonstrates building a multi-tenant ReBAC+ABAC authorization model for a document app and running it end to end: create a store, write model and relationship tuples, run created model and tests in ten minutes via the CLI and Studio, and query permissions with a simple check call. Shows integration with SDKs and observability—integrates with Prometheus Grafana Jaeger—and surfaces runtime detail such as a check that involved two DB reads, proving the approach works and is auditable.
AI-written summary · about
chapters (7)
- 0:00OpenFGA intro and auth challenges
- 3:52Relationship-based access control
- 8:07OpenFGA demo CLI and testing
- 10:34Extending models roles groups resources
- 17:08Integrating OpenFGA into apps
- 18:57Telemetry in OpenFGA servers
- 24:19Q&A and resources
related talks
25mImplementing Modern Cloud Native Authorization Using OpenFGA
46mInfuse Business Logic into Permissions with ReBAC
54mFine-Grained Authorization for Modern Applications
06mProject Lightning Talk: OpenFGA: The Cloud Native Way to Implement Fine Grained Authorization
33mFine-Grained Policies RBAC with OpenFGA
40mImplementing a Multi-Tenant, Relationship-Based Authorizatio...- 33mFine-Grained Policies RBAC with OpenFGA
37mRole-Based Access Is so Yesterday: Revolutionizing Authorization with Open FGA