# OpenFGA

6 Hacker News commenters recommended OpenFGA and 0 criticized it, November 2025 to November 2026. It was recommended in 5 of 13 months.

**Verdict:** People recommend it for centralizing authorization policies and handling complex fine-grained ReBAC permissions.

## Why people recommend it

- Handles complex fine-grained ReBAC authorization (3 comments): "I've found OpenFGA to be really nice. We used it to set up some pretty complex authz" ([source](https://news.ycombinator.com/item?id=48820391)) "OpenFGA for fine-grained ReBAC authorization on every tool call" ([source](https://news.ycombinator.com/item?id=47701268)) "if you want something more fancy ReBac (tools like openfga)" ([source](https://news.ycombinator.com/item?id=46899749))
- Centralizes authorization outside application code (2 comments): "systems like openfga can help make that easier by centralizing the authorization policies" ([source](https://news.ycombinator.com/item?id=46899810)) "it completely eliminate the AuthZ from our code." ([source](https://news.ycombinator.com/item?id=46772581))
- Seen as mature and worth evaluating (2 comments): "it’s worth taking a look at OpenFGA" ([source](https://news.ycombinator.com/item?id=46377406)) "OpenFGA looks pretty mature already" ([source](https://news.ycombinator.com/item?id=48821796))

## Alternatives hackers recommend

- [Cedar policy language](https://hackerapproved.com/p/cedar.md): 7 recommend
- [SpiceDB](https://hackerapproved.com/p/spicedb.md): 5 recommend
- [Rego (Open Policy Agent)](https://hackerapproved.com/p/rego.md): 5 recommend

## Cite as

Hacker Approved, "OpenFGA", https://hackerapproved.com/p/openfga/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).