Skip to content

Latest commit

 

History

History
54 lines (36 loc) · 2.21 KB

README.md

File metadata and controls

54 lines (36 loc) · 2.21 KB
Raw

fgamanager (WIP)

asciicast

Important

This is a experimental work in progress. Low test coverage and more playing with the whole setup to test its applicability.

Alternative to the official OpenFGA playground that has some limitations.

fgamanager is a text based UI built with Golang's tview. The goal is to have a table oriented navigation with a simple search to find tuples of interest. Users will be allowed to mark them for deletion or create new ones.

Contributions welcome!

Running it

Check the help:

usage: fgamanager [-h|--help] [-a|--apiUrl "<value>"] -s|--storeId "<value>"
                  [-p|--prune]

                  fgamanager

Arguments:

  -h  --help     Print help information
  -a  --apiUrl
  -s  --storeId  The Store Id to connect to
  -p  --prune    Causes fgamanager to prune stale entries on startup. Default:
                 false

Then point to your fga and provide the store id.

go run . -a https://myopenfga:8080 -s 03HME1444HSEY9022AENH1YYKFJ

Features

  • Delete tuples (CTRL-D)
  • Create a new tuple (CTRL-N)
  • Search

How it works

So far I've made a risk decision to se FGA's canges endpoint to replicate tuples locally to a SQLite. SQLite can be shared and saved to a cheap storage like S3 or GCS, then shared if needed.

It keeps the last state only, meaning all changes are applied locally but not kept, reducing the data that will be needed in general. This is not tested against billions of rows, which might be challenging, but for ordinary setups with millions of rows, this should be stable enough.

High tuple volume

fgamanger was used with more than 1.3Mi tuples with no hiccups. This is possible employing tview's virtual tables.

Multiple stores

At the moment the easiest way to connect to multiple stores is by running fgamanger in different folders in order to create a separate sqlite database for each store. In the future it will be possible to specify full database path.