Generate types from authorization model

[azan-n]

Checklist

• I agree to the terms within the OpenFGA Code of Conduct.

Describe the problem you'd like to have solved

Currently, I haven't found a way to have strong types generated from the Authorization Model in use, even though it should be possible. This could also be provided as just an OpenAPI spec at runtime for clients to understand dynamically as the model changes.

Describe the ideal solution

Not sure what the ideal would be in this case since different languages have different semantics.

Alternatives and current workarounds

No response

Additional context

No response

[coderabbitai[bot]]

A summary of the changes CodeRabbit can apply:

• Implement a server- and CLI-backed code-generation feature that produces language-specific, strongly-typed client code from OpenFGA authorization models (phased rollout: codegen package and TypeScript POC → server API → additional languages → CLI → SDK updates), creating docs/rfcs/type-generation-from-authorization-models.md and pkg/codegen/doc.go and adding a TODO/link in pkg/server/authorization_models.go.

• Add a new RFC describing server- and CLI-based generation of language-specific, strongly-typed client code from OpenFGA authorization models (docs/rfcs/type-generation-from-authorization-models.md), introduce a new codegen package doc (pkg/codegen/doc.go) and add a TODO note in the authorization_models server file (pkg/server/authorization_models.go) to add a type-generation endpoint.

• ✅ Create PR with these edits
• 📋 Get copyable edits

[dyeam0]

Hello @azan-n, we have an item in our backlog but it is not currently planned. There are some other solutions that others are building themselves:

• JavaScript https://github.com/marramsak/openfga-type-generator/
• Go https://github.com/sectrean/fluentfga
• .NET https://github.com/CharlieDigital/dn-openfga

[azan-n]

Hello @azan-n, we have an item in our backlog but it is not currently planned. There are some other solutions that others are building themselves:

• JavaScript https://github.com/marramsak/openfga-type-generator/
• Go https://github.com/sectrean/fluentfga
• .NET https://github.com/CharlieDigital/dn-openfga

Is there a defined spec for the Authorization Language DSL that I could use for this? I'm happy to take this up because it is interesting to me.

[rhamzeh]

Hi @azan-n - the DSL spec is here: https://github.com/openfga/language/blob/main/OpenFGAParser.g4

But you probably shouldn't be parsing that manually - instead rely on the JSON variation that is much easier to parse.

The JSON spec is defined here and every SDK has an auto-generated interface for it (AuthorizationModel), and you should be able to use them.

[daniele-solutiontech]

Hi, any update on this?

[rhamzeh]

Hi @daniele-solutiontech - no, not from our end. It is on our radar but not high priority at the moment.