# 使用 Homebrew, Nix, scoop 安装 openfga

查看 openfga 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:openfga
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install openfga
```

  证据: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#openfga
```

  证据: nixpkgs package indexes: pkgs/by-name/op/openfga/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

### Windows

- Scoop (92%):

```sh
scoop install main/openfga
```

  证据: Scoop official bucket manifest trees: bucket/openfga.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## 软件包事实

- **软件包键:** brew:openfga
- **软件包管理器:** Homebrew
- **版本:** 1.18.1
- **来源摘要:** High performance and flexible authorization/permission engine
- **主页:** <https://openfga.dev/>
- **仓库:** <https://github.com/openfga/openfga>
- **最后更新:** 2026-07-27T23:46:51+02:00
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- openfga (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 1.18.1
## 项目历史与用法

OpenFGA is an open-source, Zanzibar-inspired fine-grained authorization service for modeling and checking relationships between users, objects, and permissions. It packages relationship-based access control behind HTTP APIs, SDKs, a CLI, a playground, and deployable server artifacts, giving application teams a shared authorization engine instead of embedding access-control rules separately in each service.

### 项目历史

Auth0 announced OpenFGA on June 17, 2022 as the open-source engine powering Auth0 Fine Grained Authorization. The project was designed, built, and sponsored by Okta/Auth0, and its model follows the ideas in Google's Zanzibar paper while exposing a developer-facing modeling language and APIs for authorization checks.

The project moved quickly from initial release to a cloud-native operational shape. OpenFGA v1.0 was announced on April 14, 2023 for launch at KubeCon + CloudNativeCon Europe, with improvements such as a more readable authorization model language, ListObjects, OpenTelemetry tracing, Prometheus metrics, profiling, Helm-chart deployment, a PostgreSQL storage-adapter performance push, and expanded SDK support.

OpenFGA entered CNCF Sandbox status in September 2022 and was accepted as a CNCF Incubating project in November 2025. The CNCF incubation announcement describes the project as the foundation for Auth0 FGA and notes growing maintainer participation from companies beyond Okta/Auth0.

### 采用历史

OpenFGA's adoption story is tied to the cloud-native search for externalized authorization. Its own site lists adopters including Auth0, Canonical, Docker, Grafana, Headspace, OpenObserve, Read AI, Sourcegraph, and Zuplo, while the CNCF incubation announcement reports public production acknowledgements from 37 companies and broader use by hundreds of companies.

The ecosystem expanded beyond the server itself through SDKs, storage adapters, tooling, and integrations. By the v1.0 announcement, community work included a MySQL storage adapter, SDKs for additional languages, and integrations with projects such as Open Policy Agent, Keycloak, Kratos, and SCIM; the later CNCF announcement also highlights SQLite, Terraform, VS Code, and IntelliJ ecosystem work.

### 使用方式

Developers use OpenFGA by writing an authorization model and then storing relationship tuples that bind users, relations, objects, and optional conditions. The Check API answers whether a user has a relation to an object, while ListObjects and related APIs help ask reverse questions such as which resources a user may access.

The modeling language can be authored as JSON or as a DSL that compiles to JSON before reaching the API. This makes the same authorization graph usable through direct API calls, SDKs, the CLI, the playground, and IDE extensions, while keeping the stored model close to Zanzibar's tuple-to-userset concepts.

### 为什么软件包爱好者会关心

For package nerds, OpenFGA is notable because it turns a research lineage from Google's Zanzibar into a package-manager-installable service with operational batteries: binaries, containers, Helm charts, SDKs, adapters, and migration-managed storage backends.

Its metadata also captures a broader trend: authorization is moving from application libraries toward standalone infrastructure, sitting near identity providers, service meshes, policy engines, and databases in the developer toolbox.

### 时间线

- June 2022: Auth0 announced OpenFGA as the open-source engine behind Auth0 Fine Grained Authorization.
- September 2022: OpenFGA was accepted as a CNCF Sandbox project.
- April 2023: OpenFGA v1.0 was announced for launch at KubeCon + CloudNativeCon Europe.
- November 2025: CNCF accepted OpenFGA as an Incubating project.

### Related projects

- OpenFGA is directly related to Google's Zanzibar paper and to the commercial Auth0 FGA service. In the wider authorization ecosystem it sits near Open Policy Agent, Keycloak, Kratos, SCIM integrations, and other ReBAC/RBAC/ABAC tooling.

### 来源

- <https://auth0.com/blog/auth0s-openfga-open-source-fine-grained-authorization-system/>
- <https://auth0.com/blog/openfga-v10-a-new-milestone-in-cloud-native-authorization-systems/>
- <https://github.com/openfga/openfga>
- <https://openfga.dev/>
- <https://openfga.dev/docs/concepts>
- <https://openfga.dev/docs/configuration-language>
- <https://raw.githubusercontent.com/openfga/openfga/main/RELEASES.md>
- <https://www.cncf.io/blog/2025/11/11/openfga-becomes-a-cncf-incubating-project/>


## 安全说明

没有找到 openfga 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: /etc/openfga/config.yaml, ~/.openfga/config.yaml, ./config.yaml
## 其他软件包管理器记录

- Nix - openfga: normalized package name match | nixpkgs package indexes: pkgs/by-name/op/openfga/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Scoop - main/openfga: normalized package name match | Scoop official bucket manifest trees: bucket/openfga.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/openfga.yml](https://github.com/mxcl/pkgdb/blob/main/combined/openfga.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph