freetool-iap-auth-architecture

Explain Google IAP authentication and OpenFGA authorization architecture in the Freetool codebase.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/wonderlydotcom/freetool --skill freetool-iap-auth-architecture
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: freetool-iap-auth-architecture
Source: https://github.com/wonderlydotcom/freetool/tree/main/.agents/skills/freetool-iap-auth-architecture
Command: npx skills add https://github.com/wonderlydotcom/freetool --skill freetool-iap-auth-architecture

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill clarifies the intricate authentication and authorization mechanisms within the Freetool codebase, specifically detailing the integration of Google Identity-Aware Proxy (IAP) and OpenFGA.

Core Features & Use Cases

  • Architecture Mapping: Explains how IAP and OpenFGA components fit into the Onion/Hexagonal architecture.
  • Request Flow Tracing: Details the end-to-end journey of a request through authentication and authorization layers.
  • Code Snippets: Provides concrete F# code examples for key implementation points.
  • Use Case: Understand how user identity is verified via IAP and how granular permissions are enforced using OpenFGA for specific resources within Freetool.

Quick Start

Explain the Freetool IAP authentication and OpenFGA authorization architecture, including middleware placement and request flow.

Frequently Asked Questions about freetool-iap-auth-architecture

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does Google IAP authentication work with OpenFGA authorization in F#?

Google IAP authentication works with OpenFGA authorization in F# by using middleware to verify user identity via IAP headers, then enforcing granular permissions through OpenFGA abstractions for specific resources.

How do I integrate OpenFGA permissions into an Onion architecture using F#?

Integrate OpenFGA permissions into an Onion architecture by mapping IAP and OpenFGA components to specific architectural layers, configuring middleware registration, and abstracting permission checks within your F# codebase.

What is the request flow for IAP identity verification and OpenFGA permission checks?

The request flow for IAP identity verification and OpenFGA permission checks traces the end-to-end journey of a request through authentication layers, followed by identity provisioning and authorization validation.

Can I use F# to configure OpenFGA authorization middleware for Google IAP?

Yes, you can use F# to configure OpenFGA authorization middleware for Google IAP by applying provided F# code samples to set up middleware registration and execute granular permission checks.

Do I need Google IAP to enforce granular OpenFGA permissions in F#?

Google IAP is required to provision user identity and verify authentication before OpenFGA can enforce granular authorization permissions for specific resources within your F# application architecture.