FGA as an API Gateway Enforcement Point: OpenFGA Behind a Cloudflare Worker
· Auth0, Auth0 FGA, Customer Identity Products
A real Cloudflare Worker in front of a real OpenFGA store, deciding every request's fate before a line of application code runs. The access token carries no permissions claim at all; the allow, deny, or unavailable verdict happens entirely at the gateway.