fine-grained-authorization

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.

Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

A curated list of information and resources about authorization.

Official command-line tool for managing SpiceDB

Keycloak integration with OpenFGA (based on Zanzibar) for Fine-Grained Authorization at Scale (ReBAC)

OpenFGA SDK for Go.

An awesome list for the SpiceDB ecosystem 😎

A cross-platform CLI to interact with an OpenFGA server.

Kubernetes controller for managing instances of SpiceDB

Official SpiceDB client library for Go

GrantForge (formerly AuthX) is an open-source (MIT) unified permission platform. It answers two questions in one place: who can do what (functional authorization) and who can see which data (data and field authorization).

OpenFGA-to-PostgreSQL authorization compiler. Generates specialized SQL functions from .fga schemas that query your existing tables. Zero sync, always consistent.

🔐 Lightning fast, global scale authorization service without the overhead of a yet another DSL.

OpenFGA SDK for node.js and JavaScript

Google's Zanzibar paper annotated for folks outside of Google

OpenFGA SDK for Python 3

OpenFGA SDK for .NET

Fine-grained authorization for AI agents using OpenFGA.