Added
-
The ListObjects API provides a way to list all of the objects (of a particular type) that a user has a relationship with. It provides a solution to the Search with Permissions (Option 3) use case for access-aware filtering on smaller object collections. It implements the ListObjects RFC.
This addition brings with it two new server configuration options
--listObjects-deadline
and--listObjects-max-results
. These configurations help protect the server from excessively long lived and large responses.⚠️ If
--listObjects-deadline
or--listObjects-max-results
are provided, the endpoint may only return a subset of the data. If you provide the deadline but returning all of the results would take longer than the deadline, then you may not get all of the results. If you limit the max results to 1, then you'll get at most 1 result. -
Support for presharedkey authentication in the Playground (#141)
The embedded Playground now works if you run OpenFGA using one or more preshared keys for authentication. OIDC authentication remains unsupported for the Playground at this time.