API Services ModelServiceInterface - evansims/openfga-php GitHub Wiki

Service interface for managing OpenFGA authorization models. This service provides business-focused operations for working with authorization models, abstracting away the underlying repository implementation details and providing enhanced functionality like validation, cloning, and convenience methods. Authorization models define the permission structure for your application, including object types, relationships, and computation rules. Models are immutable once created, ensuring consistent authorization behavior. ## Core Operations The service supports model management with enhanced functionality: - Create models with comprehensive validation - Retrieve models with improved error handling - Clone models between stores for multi-tenant scenarios - Find the latest model version automatically ## Usage Example php $modelService = new ModelService($modelRepository); Create a new model with validation $result = $modelService->createModel( $store, $typeDefinitions, $conditions ); Get the latest model for a store $latest = $modelService->getLatestModel($store)->unwrap(); Clone a model to another store $cloned = $modelService->cloneModel( $sourceStore, $modelId, $targetStore )->unwrap();

OpenFGA\Services

View source code

• ModelService (implementation)

public function cloneModel(string $modelId): FailureInterface|SuccessInterface

Clone an authorization model to another store. Copies a model from one store to another, useful for multi-tenant scenarios where you want to replicate a permission structure. The cloned model gets a new ID in the target store.

View source

FailureInterface | SuccessInterface — Success with the cloned model, or Failure with error details

public function createModel(
    TypeDefinitionsInterface $typeDefinitions,
    ConditionsInterface|null $conditions = NULL,
    SchemaVersion $schemaVersion = OpenFGA\Models\Enums\SchemaVersion::V1_1,
): FailureInterface|SuccessInterface

Create a new authorization model with validation. Creates an immutable authorization model from the provided type definitions and optional conditions. The model is validated before creation to ensure it conforms to OpenFGA's schema requirements.

View source

FailureInterface | SuccessInterface — Success with the created model, or Failure with validation/creation errors

public function findModel(string $modelId): FailureInterface|SuccessInterface

Find a specific authorization model by ID. Retrieves a model with enhanced error handling, providing clear messages when models are not found or other errors occur.

View source

FailureInterface | SuccessInterface — Success with the model, or Failure with detailed error information

public function getLatestModel(StoreInterface|string $store): FailureInterface|SuccessInterface

Get the most recent authorization model for a store. Retrieves the latest model version, which is typically the active model being used for authorization decisions. This is a convenience method that avoids needing to list all models and manually find the newest one.

View source

FailureInterface | SuccessInterface — Success with the latest model, or Failure if no models exist

public function listAllModels(
    string|null $continuationToken = NULL,
    int|null $pageSize = NULL,
): FailureInterface|SuccessInterface

List all authorization models for a store. Retrieves all models with automatic pagination handling. This method aggregates results across multiple pages up to the specified limit.

View source

FailureInterface | SuccessInterface — Success with the models collection, or Failure with error details

public function validateModel(
    TypeDefinitionsInterface $typeDefinitions,
    SchemaVersion $schemaVersion = OpenFGA\Models\Enums\SchemaVersion::V1_1,
): FailureInterface|SuccessInterface

Validate type definitions before creating a model. Performs validation on type definitions to catch errors before attempting to create a model. This is useful for providing immediate feedback in user interfaces or validation pipelines.

View source

FailureInterface | SuccessInterface — Success if valid, or Failure with validation errors