Securing data in your Next.js app with Okta and OpenFGA
May 16, 2024

Summary
This post introduces the concept of a Data Access Layer (DAL) for Next.js applications to centralize authentication and authorization checks. It explains the differences between client-side and server-side code, and server and client components in Next.js. The post then details how to implement fine-grained authorization using OpenFGA (or Okta FGA) for relationship-based access control (ReBAC), providing an example authorization model and demonstrating how to integrate the OpenFGA SDK into the DAL for checking permissions.