OpenFGA — Patterns & RBAC→ReBAC migration — study / POC
The through-line of the series. After several POCs, this work consolidates the reusable patterns and a migration method from classic RBAC.
What I document / prototype
- Patterns: groups, inheritance, ownership, sharing, temporary delegation.
- RBAC → ReBAC migration method: map roles → relations without a big bang.
- Authorization tests (
checkassertions) as a safety net.
Stack
OpenFGA · modelling · NestJS · tests
Study / POC — synthesis and best practices, not deployed to production.