vault / openfga / v1.16.0

openfga @ v1.16.0

integrity

size: 1.2 MiB
downloaded: 2026-07-04 06:56 UTC
last checked: 2026-07-18 21:05 UTC
overlays: go
detected: go module github.com/openfga/openfga

source https://github.com/openfga/openfga · available · github

release notes

Added

Added datastore ping timeout (PingTimeout) and datastore ping retry timeout (PingRetryMaxElapsedTime) configurations. #3113

Changed

Report allowed result and tuple_key on Check and experimental weighted_graph_check resolution trace spans. #3116

Fixed

Fixed cache key collisions in experimental weighted_graph_check union resolution by moving result caching from the union node level to the individual edge level, preventing collisions across requests that share edges but differ in object or relation. #3117
Fixed a bug in experimental weighted_graph_check where in-flight goroutines cancelled by a union short-circuit or recursive resolution could cache a false result, causing subsequent requests to incorrectly return false without querying the datastore. #3125
Fixed experimental weighted_graph_check returning an error when v2Check fails; Check now falls back to the standard algorithm instead. #3126
Fixed OIDC authentication rejecting valid tokens after issuer key rotation by enabling JWKS refresh on unknown kid (rate-limited to once per minute). #3101

Security

Update toolchain Go version to 1.26.3 to address the Go standard library vulnerabilities documented in the Go 1.26.3 release notes. #3115

New Contributors

@andrey-berenda made their first contribution in https://github.com/openfga/openfga/pull/3101

Full Changelog: https://github.com/openfga/openfga/compare/v1.15.1...v1.16.0

download

unix · zip

curl -fL -o v1.16.0.zip https://ratatoskr.space/pkg/openfga/v1.16.0.zip
                    printf '%s  %s\n' '751ea459d01907805db37ec27d94b3434fefce63ad129d6272618ac5c8314210' 'v1.16.0.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/openfga/v1.16.0.zip"
$out = "v1.16.0.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "751ea459d01907805db37ec27d94b3434fefce63ad129d6272618ac5c8314210") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.16.0.tar.gz https://ratatoskr.space/pkg/openfga/v1.16.0.tar.gz
                    printf '%s  %s\n' '5ca5d4929a1f7e6ce48b5e7542803b5815e862799998d6aee8d4ab93c6e66427' 'v1.16.0.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/openfga/v1.16.0.tar.gz"
$out = "v1.16.0.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "5ca5d4929a1f7e6ce48b5e7542803b5815e862799998d6aee8d4ab93c6e66427") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.16.0.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.16.0.zip
                    printf '%s  %s\n' '751ea459d01907805db37ec27d94b3434fefce63ad129d6272618ac5c8314210' 'v1.16.0.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.16.0.zip"
$out = "v1.16.0.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "751ea459d01907805db37ec27d94b3434fefce63ad129d6272618ac5c8314210") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.16.0.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.16.0.tar.gz
                    printf '%s  %s\n' '5ca5d4929a1f7e6ce48b5e7542803b5815e862799998d6aee8d4ab93c6e66427' 'v1.16.0.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.16.0.tar.gz"
$out = "v1.16.0.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "5ca5d4929a1f7e6ce48b5e7542803b5815e862799998d6aee8d4ab93c6e66427") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.16.0.zip	zip	1.2 MiB	blake3-24 d6800a5bc876aeb1de47339bda57ed518f5c5a3710d01b1c sha256 751ea459d01907805db37ec27d94b3434fefce63ad129d6272618ac5c8314210 sha1 8e390c8346ea54ff9d2d98d9315fbd8094fdfd1c
v1.16.0.tar.gz	tar.gz	997.5 KiB	blake3-24 c38ff6df0f272400857a73f2abe6e666fd774fe9a370eb65 sha256 5ca5d4929a1f7e6ce48b5e7542803b5815e862799998d6aee8d4ab93c6e66427 sha1 1ceabef06ce29bceb2bd68c5b1aae37f4aad4b96

go module archive

module zip with the module path rewritten to this mirror; fetched by go get through the GOPROXY route

artifact	format	size	hashes
v1.16.0.zip	zip	1.2 MiB	blake3-24 c92a5102afe1ffcb928cb9cfab55efc8698f2e25ff5e18eb sha256 728841394f3d070b931dcf88d9c05f77eb4a044eb8998d80d90b90a4cf5f6594 sha1 40f953281e85e023d619cd6039c5d348a3d07d68

install

bazel

http_archive(
    name = "openfga",
    urls = ["https://ratatoskr.space/pkg/openfga/v1.16.0.tar.gz"],
    integrity = "sha256-XKXUkpoffmzki151QoA7WBXoYnmZmNau6NSrk8bmZCc=",
    strip_prefix = "openfga-v1.16.0",
)

zig

.url = "https://ratatoskr.space/pkg/openfga/v1.16.0.tar.gz",

GOPROXY=https://ratatoskr.space GOSUMDB=off go get ratatoskr.space/pkg/openfga@v1.16.0

install via yggdrasil mesh

bazel

http_archive(
    name = "openfga",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.16.0.tar.gz"],
    integrity = "sha256-XKXUkpoffmzki151QoA7WBXoYnmZmNau6NSrk8bmZCc=",
    strip_prefix = "openfga-v1.16.0",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga/v1.16.0.tar.gz",

GOPROXY=http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg GOSUMDB=off GOINSECURE=14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/* go get 14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/openfga@v1.16.0

← v1.16.1 v1.15.1 →