OpenFGA

OpenFGA 是 CNCF 孵化阶段的开源细粒度授权引擎，思路来自 Google 的 Zanzibar 论文：用可读的关系模型描述谁能对哪个对象做什么，再通过 API 在毫秒级判定。Grafana、Docker、Canonical 都在用。起步只要一条 docker 命令，模型可以用 DSL 或 JSON 写，配套 Playground 能边改模型边验证关系图。适合做多租户、共享文档、组织架构这类权限。 🔗 文档: https://openfga.dev/docs | 🔗 快速上手: https://openfga.dev/docs/getting-started

OpenFGA is a CNCF Incubating open-source fine-grained authorization engine inspired by Google’s Zanzibar paper: you describe who can do what to which object in a readable relationship model and the API answers in milliseconds. Grafana, Docker and Canonical use it. Getting started takes a single docker command, models are written in a DSL or JSON, and a Playground lets you edit a model and check the relationship graph as you go. 🔗 Docs: https://openfga.dev/docs | 🔗 Getting started: https://openfga.dev/docs/getting-started