Design Patterns for Consistent Centralized Authorization#

José Padilla, Auth0 & Alice Gibbons, Diagrid — Adjacent

• Why: Centralized fine-grained authorization (OpenFGA / Zanzibar-style) raises a real data-consistency problem — keeping authorization data in sync with distributed app state — that the identity side eventually hits.
• What: Patterns for reliably synchronizing centralized authorization data (users, roles, relationships) with distributed application state. (from abstract only)
• How: Uses Dapr building blocks (pub/sub, state management) to coordinate consistent dual writes between apps and OpenFGA via asynchronous domain events, avoiding a shared database. (from abstract only)
• Where applicable: Microservices adopting OpenFGA/ReBAC with an event-driven backbone; the Dapr specifics are one implementation, the dual-write consistency problem is general.