OpenFGA is an open-source relationship-based access control (ReBAC) engine based on Google's Zanzibar, designed for building fine-grained permissions.

Does this skill handle complex role hierarchies?

Yes, it covers advanced patterns like concentric permissions and indirect relationship definitions (X from Y) to model complex organizational access.

Which SDKs are supported by this skill?

The skill includes specific implementation rules and best practices for JavaScript/TypeScript, Go, Python, Java, and .NET SDKs.

How does this skill help with authorization testing?

It provides standardized patterns for .fga.yaml files, enabling you to write assertions that verify check results, list objects, and list users for your model.

OpenFGA Authorization Modeling

Name: OpenFGA Authorization Modeling
Author: openfga

byopenfga

0•

Security & Testing

Guides the design, testing, and implementation of scalable relationship-based access control using OpenFGA best practices.

The OpenFGA skill empowers developers to build secure and efficient fine-grained access control (ReBAC) systems by providing domain-specific guidance on authorization modeling. It covers everything from core schema definitions and relationship patterns to complex hierarchical access and custom role implementations. Whether you are authoring .fga models, writing relationship tuples, or integrating OpenFGA SDKs into your backend, this skill ensures your authorization logic is optimized, testable, and follows industry-standard security patterns.

Key Features

01Structured testing patterns using .fga.yaml files and check assertions

02Comprehensive guidance for OpenFGA schema 1.1 and relationship modeling

030 GitHub stars

04Optimization strategies for reducing tuple counts and simplifying access logic

05Best practices for defining direct, concentric, and indirect relationships

06Multi-language SDK integration for JS, Go, Python, Java, and .NET

Use Cases

01Automating the validation of complex authorization rules during the CI/CD process

02Refactoring legacy permission logic into a centralized relationship-based model

03Designing a multi-tenant authorization system with hierarchical resource access

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add openfga/agent-skills openfga

For use in Claude.ai and ChatGPT

Download Skill