OpenFGA — Authorization at the gateway — POC
The idea. Rather than scattering checks across every microservice, centralise authorization at the gateway: a single, consistent decision point.
What I prototype
- Gateway middleware translating route + method →
check(user, relation, object)OpenFGA. - Decision cache and low-latency evaluation.
- Explicit denial and access logging.
Stack
OpenFGA · Nginx/Gateway · NestJS · Microservices
POC — architecture test bed, not deployed to production.