OpenFGA: Relationship-Based Authorization at Scale

Most applications handle authorization by checking roles at runtime or gathering attributes from a database right when access is needed. The first approach is too coarse. The second doesn't scale.

OpenFGA takes a different path: store relationships as they happen, so when someone tries to access something, the answer is already there. Whitney Lee and Raghd Hamzeh, Senior Software Engineer at Auth0, trace how this works and why it matters for sharing, auditability, and keeping authorization logic out of your application code.

Github: https://github.com/openfga

OpenFGA is a CNCF Incubating project.

Prefer the full ⚡ Enlightning episode?
Flexible Authorization with OpenFGA →    • ⚡️ Enlightning - Flexible Authorization wi...  

Watch all ⚡ Enlightning episodes →    • ⚡️ Enlightning  

Watch all 🌩️ Thunder episodes →    • 🌩️ Thunder  

٩( ᐛ )و Subscribe to Whitney's YouTube channel →    / @wiggitywhitney  

#OpenFGA #Authorization #CNCF #Kubernetes #Security

▬▬▬▬▬▬ ⚡️ Related Links ⚡️ ▬▬▬▬▬▬
🔗 OpenFGA → https://openfga.dev
🔗 OpenFGA GitHub → https://github.com/openfga
🔗 Keycloak Enlightning episode →    • ⚡️ Enlightning - Keycloak: The Open Source...  
🔗 CNCF Slack → https://slack.cncf.io (channel: #openfga)

00:00 - Intro 00:41 - The Problem: What was Authorization like Before OpenFGA? 01:25 - What is OpenFGA? 02:08 - How Relationship-Based Authorization Works 03:06 - The BIG Difference: OpenFGA vs. ABAC 06:29 - Common Use Cases for OpenFGA 07:28 - Understanding the Authorization Model 09:42 - The Future of OpenFGA 11:14 - How to Get Involved with the Community 11:35 - Outro