OpenFGA
Apache-2.0 Zanzibar-style ReBAC with a Check API
Auth / AuthZ · Apache-2.0 · 6k
Reviewed 2026-09-04 · last push 2026-10-20 · repo checked 2026-10-21
What's Good
Apache-2.0. Relationship-based access control, Check API, modeling language. Self-host the authorization service. CNCF-flavored ReBAC without inventing your own graph.
The Catch
Zanzibar-style ReBAC + Check API — not Cerbos YAML ABAC. Vs SpiceDB: CNCF/Okta OpenFGA modeling + Check API lane; SpiceDB is AuthZed production Zanzibar + ZedTokens/Cloud. Distinct from Cerbos.
Verdict
Apache-2.0 ReBAC. Self-host free. Not Cerbos YAML.
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/openfga)
HTML
<a href="https://stackgems.com/gems/openfga"><img src="https://stackgems.com/badge/openfga.svg" alt="OpenFGA reviewed on Stack Gems" height="20"></a>