Skip to content

Add OpenFGA as a Policy Store #661

@gemanor

Description

@gemanor

An OPAL policy-store is an interface that enables OPAL to manage policy-engines that can make authorization decisions via OPAL clients.

This issue is a feature request to add OpenFGA as a policy-store in OPAL alongside the existing supported policy stores (OPA and Cedar) so developers can better manage OpenFGA services.

Acceptance criteria:

  • Ability to configure OpenFGA as a policy store in OPAL
  • OpenFGA models/policies are auto-synced from git
  • OpenFGA supports the data fetching pattern and syncing data from external data sources
  • A working end-to-end demo with example ReBAC policies and mock data
  • Docker-compose examples of running OPAL with single or multiple OpenFGA clients
  • 100% UT coverage on the code and at least one integration test

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions