vault / openfga / v1.14.1

openfga @ v1.14.1

integrity

size: 1.2 MiB
downloaded: 2026-07-04 06:56 UTC
last checked: 2026-07-19 09:04 UTC
overlays: go
detected: go module github.com/openfga/openfga

source https://github.com/openfga/openfga · available · github

release notes

Added

Added configuration for the server shutdown timeout. #2976

Changed

Made some minor changes in ListObjects to reduce heap allocations. Results in minor latency reduction. #3043
Improve cache key generation performance by removing fmt usage and extend control-character sanitization to all cache key inputs (tuples, conditions, context). #3006

Fixed

Fixed AuthZEN discovery metadata to publish endpoint URLs from the configured authzen.baseURL instead of request-supplied host headers, preventing host-header poisoning of /.well-known/authzen-configuration/{store_id}. Thanks to @Jvr2022 for reporting this. #3057

Security

Removed the vulnerable github.com/docker/docker package (used only in tests) and replaced it with Moby (client & api). #3047

Thanks to @rafanaskin for #2976 and #3047!

Full Changelog: https://github.com/openfga/openfga/compare/v1.14.0...v1.14.1

download

unix · zip

curl -fL -o v1.14.1.zip https://ratatoskr.space/pkg/openfga/v1.14.1.zip
                    printf '%s  %s\n' 'eeda66da46a8d5dcef6b0ed968f7a9ec1dac1d7588edaae17801b4310a6f8e42' 'v1.14.1.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/openfga/v1.14.1.zip"
$out = "v1.14.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "eeda66da46a8d5dcef6b0ed968f7a9ec1dac1d7588edaae17801b4310a6f8e42") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.14.1.tar.gz https://ratatoskr.space/pkg/openfga/v1.14.1.tar.gz
                    printf '%s  %s\n' '4fce667df35b5662b2d21f5a905cc4f8e29dc465ca0f671f093fe247c4041a99' 'v1.14.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/openfga/v1.14.1.tar.gz"
$out = "v1.14.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "4fce667df35b5662b2d21f5a905cc4f8e29dc465ca0f671f093fe247c4041a99") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.14.1.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.14.1.zip
                    printf '%s  %s\n' 'eeda66da46a8d5dcef6b0ed968f7a9ec1dac1d7588edaae17801b4310a6f8e42' 'v1.14.1.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.14.1.zip"
$out = "v1.14.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "eeda66da46a8d5dcef6b0ed968f7a9ec1dac1d7588edaae17801b4310a6f8e42") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.14.1.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.14.1.tar.gz
                    printf '%s  %s\n' '4fce667df35b5662b2d21f5a905cc4f8e29dc465ca0f671f093fe247c4041a99' 'v1.14.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.14.1.tar.gz"
$out = "v1.14.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "4fce667df35b5662b2d21f5a905cc4f8e29dc465ca0f671f093fe247c4041a99") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.14.1.zip	zip	1.2 MiB	blake3-24 21fafd72a6591eb205e9bb6912f191e3f6370d9958e95a30 sha256 eeda66da46a8d5dcef6b0ed968f7a9ec1dac1d7588edaae17801b4310a6f8e42 sha1 13d614d4afbdcb6f8fa5e2d6f7c9ad3e24a1f558
v1.14.1.tar.gz	tar.gz	968.4 KiB	blake3-24 8eec8cd4cba009988698490b967d0c27918a126303bab388 sha256 4fce667df35b5662b2d21f5a905cc4f8e29dc465ca0f671f093fe247c4041a99 sha1 bf65fa3c5e76177fa167a101d9727d291d5b8b53

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v1.14.1.zip	zip	1.2 MiB	blake3-24 967b995100c218991b213697bfc6cae21f9727778a9c1753 sha256 07808ff9047822faaa85bfa5068eff200e8a4abe0b0239263f67212594993380 sha1 8c55490452a7f1eb21d0ee01863ecd41e7cf29bf

install

bazel

http_archive(
    name = "openfga",
    urls = ["https://ratatoskr.space/pkg/openfga/v1.14.1.tar.gz"],
    integrity = "sha256-T85mffNbVmKy0h9akFzE+OKdxGXKD2cfCT/iR8QEGpk=",
    strip_prefix = "openfga-v1.14.1",
)

zig

.url = "https://ratatoskr.space/pkg/openfga/v1.14.1.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/openfga@v1.14.1

install via yggdrasil mesh

bazel

http_archive(
    name = "openfga",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.14.1.tar.gz"],
    integrity = "sha256-T85mffNbVmKy0h9akFzE+OKdxGXKD2cfCT/iR8QEGpk=",
    strip_prefix = "openfga-v1.14.1",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.14.1.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga@v1.14.1

← v1.14.2 v1.14.0 →