Base
Hardened build
minimal ports, security patches applied at build time
OpenFGA
Azure
Applications
1 variation
fine grained authorization as a service: store relationships, ask permission questions, get answers in milliseconds.
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| OpenFGA on Ubuntu 24.04 LTS | Azure | Ubuntu 24.04 | Standard | View · Guide |
Overview
OpenFGA is an open source authorization server built on the relationship based model described in Google's Zanzibar paper. Rather than scattering permission logic through application code, you store relationships such as a user being the owner of a document, describe the object types and relations that exist in an authorization model, and then ask the server whether a given user may perform a given action on a given object. It answers Check questions for a single decision, and ListObjects or ListUsers questions to filter what a user can see. It is a Cloud Native Computing Foundation project with official SDKs for JavaScript, Go, Python, Java and .NET, and it exposes both an HTTP and a gRPC interface.
Why the cloudimg image
OpenFGA's own default is to run with no authentication at all, which leaves the entire authorization API open to anyone who can reach the port. This image never runs that way: it enforces pre shared key authentication, disables the unauthenticated development console, and generates a unique 256 bit API token on the first boot of every instance, written to a root only file. The API, the gRPC endpoint, the metrics endpoint and the database are bound to the loopback address, with nginx terminating TLS as the only door reachable from the network. A co located PostgreSQL keeps stores, models and relationships durable across restarts, a paired deploy guide walks through the whole workflow, and 24/7 cloudimg support is included.
Common uses
- Centralise permission decisions for an application or a fleet of microservices
- Model sharing, roles and nested group access without writing bespoke logic
- Filter list views to exactly the records a user is allowed to see
More in Applications
Actual Budget
Applications
Actual Budget, the open source envelope budgeting app, ready to give every unit of money a job the moment it boots.
Admidio
Applications
Admidio, the open source membership management platform for clubs, associations and non profit organisations, configured
AdventureLog
Applications
AdventureLog, a self hosted travel journal, ready to log trips and pin your adventures on an interactive map on first bo
Ai
Aim
Applications
Aim, an open source experiment tracker for machine learning, hardened and ready on Ubuntu 24.04.
AirTrail
Applications
AirTrail, a self hosted flight tracker and travel log that maps every journey you take and turns your flight history int
Ak
Akkoma
Applications
Akkoma, a self hosted, federated microblogging server, ready to run your own fediverse instance from first boot.