vault / openfga / v1.3.1

openfga @ v1.3.1

integrity

size: 609.3 KiB
downloaded: 2026-07-04 06:58 UTC
last checked: 2026-07-04 06:58 UTC
overlays: go
detected: go module github.com/openfga/openfga

source https://github.com/openfga/openfga · available · github

release notes

Added

Count datastore queries involved in Check resolution metadata (#880)

OpenFGA request logs and traces will now include a field datastore_query_count that shows how many queries were involved in a single Check resolution.
Histogram metric to report the datastore_query_count per Check (#924)

This new metric can be used to report percentiles of the number of database queries required to resolve Check requests.
Check request duration histogram labeled by method and datastore query count (#950)

The request_duration_by_query_count_ms metric reports the total request duration (in ms) labelled by the RPC method and ranges of observations for the datastore_query_count. This metrics allows operators of an OpenFGA server to report request duration percentiles for Check requests based on the number of database queries that were required to resolve the query.
Optimize Check to avoid database lookups in some scenarios (#932)
CachedCheckResolver for caching Check subproblems (#891)

This experimental feature adds new caching capabilities to the OpenFGA server. It is an "opt-in" feature and thus must be enabled. To enable this feature you must specify the experimental flag check-query-cache and set the --check-query-cache-enabled=true flag.
```
openfga run --experimentals check-query-cache --check-query-cache-enabled=true
```
Server request logs now include the user-agent (#943)

Changed

Default Check and ListObjects concurrency read limits (#916)

In our last release v1.3.0 we modified the default behavior of Check and ListObjects such that it limits/restricts the degree of concurrency that is allowed for a single request. This change was unintended. This release reverts the default behavior back to unbounded concurrency limits (the prior default). The change mostly affects those using OpenFGA as a library.
Bumped up to Go 1.21 (#952)

Security

Patches CVE-2023-40579 - see the CVE for more details

download

unix · zip

curl -fL -o v1.3.1.zip https://ratatoskr.space/pkg/openfga/v1.3.1.zip
                    printf '%s  %s\n' '2ec81c740c0c224645d873136bdc6262f4a6a27de875fd65c85ee1acf22f6c35' 'v1.3.1.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/openfga/v1.3.1.zip"
$out = "v1.3.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "2ec81c740c0c224645d873136bdc6262f4a6a27de875fd65c85ee1acf22f6c35") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.3.1.tar.gz https://ratatoskr.space/pkg/openfga/v1.3.1.tar.gz
                    printf '%s  %s\n' '4997a434e49dc926a2109314e830ad514a4161b76f83bf06f701efccec6661d0' 'v1.3.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/openfga/v1.3.1.tar.gz"
$out = "v1.3.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "4997a434e49dc926a2109314e830ad514a4161b76f83bf06f701efccec6661d0") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.3.1.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.3.1.zip
                    printf '%s  %s\n' '2ec81c740c0c224645d873136bdc6262f4a6a27de875fd65c85ee1acf22f6c35' 'v1.3.1.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.3.1.zip"
$out = "v1.3.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "2ec81c740c0c224645d873136bdc6262f4a6a27de875fd65c85ee1acf22f6c35") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.3.1.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.3.1.tar.gz
                    printf '%s  %s\n' '4997a434e49dc926a2109314e830ad514a4161b76f83bf06f701efccec6661d0' 'v1.3.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.3.1.tar.gz"
$out = "v1.3.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "4997a434e49dc926a2109314e830ad514a4161b76f83bf06f701efccec6661d0") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.3.1.zip	zip	610.6 KiB	blake3-24 1203359ca2f66b96d12dca5fdac773fb42e0864e661d20b6 sha256 2ec81c740c0c224645d873136bdc6262f4a6a27de875fd65c85ee1acf22f6c35 sha1 f5f7c250da88fb2f89cb11276d8f90f2cc3c0625
v1.3.1.tar.gz	tar.gz	519.1 KiB	blake3-24 b8ab775634e8d4c3143ea323f18c5644a863bf12d63f68c9 sha256 4997a434e49dc926a2109314e830ad514a4161b76f83bf06f701efccec6661d0 sha1 c99565b58e3338f057db83a44ed2391160727a2e

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v1.3.1.zip	zip	613.4 KiB	blake3-24 688749fe7a1760efc6048fdd7883c37db634aff2d2385ce3 sha256 54b8dadceab310173c9caa61ae50f8b3b422f9983064843b7349a627db935db0 sha1 0e72861de89eb946700c5256ae7b9b6bfa32b01e

install

bazel

http_archive(
    name = "openfga",
    urls = ["https://ratatoskr.space/pkg/openfga/v1.3.1.tar.gz"],
    integrity = "sha256-SZekNOSdySaiEJMU6DCtUUpBYbdvg78G9wHvzOxmYdA=",
    strip_prefix = "openfga-v1.3.1",
)

zig

.url = "https://ratatoskr.space/pkg/openfga/v1.3.1.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/openfga@v1.3.1

install via yggdrasil mesh

bazel

http_archive(
    name = "openfga",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.3.1.tar.gz"],
    integrity = "sha256-SZekNOSdySaiEJMU6DCtUUpBYbdvg78G9wHvzOxmYdA=",
    strip_prefix = "openfga-v1.3.1",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.3.1.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga@v1.3.1

← v1.3.2 v1.3.0 →