rebac

Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data

An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application.

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

Cloud-native authorization for modern applications and APIs

Keycloak integration with OpenFGA (based on Zanzibar) for Fine-Grained Authorization at Scale (ReBAC)

🔐 Lightning fast, global scale authorization service without the overhead of a yet another DSL.

Google's Zanzibar paper annotated for folks outside of Google

🔏 Authorization framework for implementing Relation-based Access Control (ReBAC) with the Resolver (Inspired by GraphQL)

Secure access to the Kubernetes API using SpiceDB

Permissions for Killer Apps

VS Code extension adding SpiceDB syntax highlighting, linting, and more

A curated list of awesome providers, services and resources for Zanzibar, the global authorization system.

command line interface for Permify

A simple ReBAC / Zanzibar gem for Rails apps

A secure chat app built with React, Firebase, and Permit.io, featuring real-time ReBAC for role-based permissions in chat rooms.

Slide Contents for my Programmable Talk in 2025

Interfaces (CLIs, gRPC APIs, RESTful Web APIs) for managing cryptographic keys and securing data at rest

Postman collection for OpenFGA API with environment setup. Ready-to-use requests for authorization model and relationship management.