OpenFGA Server Synchronization

[aaguiarz]

OpenFGA is designed to work with a centralized database. Different services call the OpenFGA API to make authorization decisions.

OpenFGA has a /changes endpoint that returns all the changes performed in an OpenFGA store. It's possible to build a service that consumes that endpoint and write the changes to another OpenFGA server.

This would enable scenarios like:

• Deploying a OpenFGA in a sidecar where the data is stored locally using the SQLite adapter.
• Deploying different OpenFGA services in multiple cloud regions and cloud providers. Clients will call the closest OpenFGA service

This service can be built as an OpenFGA feature (e.g. provide a configuration option that will consume the /changes endpoint from another OpenFGA service), or an an independent service that will read from one and write to another.

Initially, it should be built as a Go library, so it can be used both from the OpenFGA server, from an service, or from any other application.