Welcome to OpenFGA's Fine-Grained News, October edition!

🎉 OpenFGA to CNCF Incubation!​

The CNCF completed the Due Diligence process to approve moving OpenFGA to the CNCF Incubation stage, and it's now open for comments. Support emojis are appreciated! 🚀 ❤️!

Thanks to Grafana, Docker, Read.AI, Agicap, and Zuplo for taking the time to talk to the CNCF about their experience!

Moving to the Incubation maturity level is great news for the OpenFGA community and we are super excited about it!

🚀 What We've Shipped​

OpenFGA v1.10.0 Performance Improvements​

Starting with OpenFGA v1.10.0, we've included a query planner that selects resolution strategies based on runtime statistics, behind the enable-check-optimization flag. The planner can pick different strategies per-relation, and we've seen significant improvements in performance for some models/relations. In-depth engineering blog post coming soon!

Write Endpoint Enhancements​

In case you missed it, we also included in v1.10.0 two new (optional) parameters to the /write endpoint that allow specifying the expected behavior when duplicated tuples are written or non-existing tuples are deleted. The Go, Java, and .NET SDK already support them, and we'll be completing support for Python, and Javascript in the next few weeks.

SDK & Tooling Updates​

• Go SDK 0.7.3 adds support for specifying custom headers per request, and for specifying conflict resolution options for Write operations. Also, v0.7.2 brings fixes to retry handling and other improvements, including allowing filtering stores by name and contextual tuples in Expand requests. Thanks to Oscar Evertsson and Cale Switzer for their contributions!

• .NET SDK 0.8.0 adds support for specifying custom headers per request, and for specifying conflict resolution options for Write operations. It builds on .NET SDK 0.7.0 that added support for .NET Standard 2.0, .NET 8 and .NET 9.

• Java SDK 0.9.2 adds support for specifying conflict resolution options for Write operations. It builds on Java SDK 0.9.1 which fixes issues when overriding request headers. Thanks to Oscar Evertsson and Vakart for their contributions!

• Python SDK 0.9.7 adds support for specifying custom headers per request, and v0.9.6 also includes some enhancements.

• CLI 0.7.5 simplifies retrieving all tuples and ignores duplicate writes when importing tuples from a file.

Read.AI, one of the earliest OpenFGA adopters, was recognized by OpenAI for processing 1 trillion tokens. They use OpenAI for RAG use cases powered by OpenFGA :).

Congrats to Luke Woloszyn, Andrew Powers, and Sam Matthews for such a great achievement!

Recent Talks & Content​

• Carla Urrea published a LinkedIn Course about OpenFGA en Español and a blog post about Understanding ReBAC and ABAC Through OpenFGA and Cedar. A repository with the examples used in the blog post is here.

• Deepu K Sasidharan presented about Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue at DevOxx.

Upcoming Events​

• Jose Padilla from Okta will be presenting at KubeCon North America, together with Alice Gibbons from Diagrid about Design Patterns for Consistent Centralized Authorization. Great chance to see OpenFGA and Dapr working together!

• Tyler Nix from Okta will host the OpenFGA Project Lightning talk OpenFGA: Google Zanzibar Style Authorization Made Developer-Friendly.

OpenFGA will also have a kiosk at the KubeCon Project Pavilion. Tyler Nix and José Padilla will be there!

The OpenFGA community submitted six proposals to present at KubeCon Europe! A great way to celebrate the upcoming CNCF Incubation stage!

See you soon!​

Fine-Grained News is published monthly. If you have any feedback, want to share your OpenFGA story, or have a noteworthy update, please let us know on any of our community channels or at [email protected].