v0.4 Alpha

Breaking Changes

• Refactors package to sit on top of Auth0.Fga as the internal client.
• Fga.Net has been renamed to Fga.Net.DependencyInjection. The core package may be used again at a later time.
• Reverts support for multi-store scenarios added in v0.3 as it was discussed that consumers are unlikely to require this.
• DI Extensions have been simplified to a single call per package:

// Fga.Net.DependencyInjection
services.AddAuth0FgaClient(x=> /**/);

// Fga.Net.AspNetCore
services.AddAuth0Fga(x=> /**/);

v0.3 Alpha

Check the README for updated instructions. The full diff for this release can be seen here.

Fga.Net

• Rebuilt Fga.Net on top of an NSwag client generated from the FGA service definition. This has resulted in breaking changes in API contracts across the board. This also means this client now has 100% API coverage.
• FgaClientConfiguration no longer accepts StoreId as a parameter, instead it must be provided on each individual API request.
• Updated the authentication client to explicitly require the audience to be passed in, rather than computing it from the environment. For the previous behavior, use FgaUtilities.GetAudienceUrl("us1").

Fga.Net.AspNetCore

There's been a general refactoring to support an arbitrary number of FGA stores via multiple authorization policies.

• AddFgaRequirement now requires a Store ID to be passed. The Store ID used for a tuple check is now directly linked to the policy.
• Renamed ComputedAuthorizationAttribute to TupleCheckAttribute
• Renamed StringComputedAuthorizationAttribute to StringTupleCheckAttribute
• The authorization middleware now consumes the request's cancellation token and will fail fast any tuple check currently in flight.

Misc

• Various internal entities have been renamed and docs updated
• Added a worker service sample