> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fga.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Decommissioning Notice - Legacy FGA Token Issuer

> Decommissioning notice and migration instructions for the Legacy FGA API Token Issuer

> [!CAUTION]
>
> **Decommissioning on April 15, 2026**
>
> The legacy token issuer `fga.us.auth0.com` will be **completely turned off on April 15, 2026**. If you are still using this endpoint, you must migrate to `auth.fga.dev` before this date or your application will lose access to the FGA API. If you have any questions, please reach out to [FGA support](https://docs.fga.dev/support.md).

At Auth0/Okta, we are continuously improving the reliability, security and performance of the Fine-Grained Authorization (FGA) service to ensure the best experience for our customers. As part of these enhancements, we migrated to a new token issuer, which further strengthens the security and resilience of your applications connected to the FGA store.

## What does this mean for you?

To continue using your FGA store without any interruptions, there are a few key updates that need to be made to your environment. Specifically, you will need to update the API Token Issuer (env: `FGA_API_TOKEN_ISSUER`) value in your configuration from `fga.us.auth0.com` to `auth.fga.dev`.

On **April 30, 2025**, the legacy token issuer (fga.us.auth0.com) was deprecated and no longer supported. **On April 15, 2026, this endpoint will be decommissioned and completely turned off.** To avoid any disruption to your services, you must update your settings before this date.

## Steps to Update Your Environment

If you have set up your SDK client as described in our [How To Setup The SDK Client](https://docs.fga.dev/integration/setup-sdk-client.md) docs, you must change the `FGA_API_TOKEN_ISSUER` environment variable to `auth.fga.dev`:

![Image showing the model explorer](https://mintlify.s3.us-west-1.amazonaws.com/auth0-fga/images/fga/docs/content/intro/assets/migration-instruction.png)

If you are not using an environment variable [as described in our docs](https://docs.fga.dev/integration/setup-sdk-client.md), please see below for the changes you need to make for each SDK.

> [tab] Node.js
>
> Update the value of `apiTokenIssuer` to reflect the new token issuer value when the FGA client is created:
>
> ```javascript theme={null}
> const openFga = new OpenFgaClient({
>     // ..
>     credentials: {
>         method: CredentialsMethod.ClientCredentials,
>         config: {
>           // ..
>           apiTokenIssuer: "auth.fga.dev"
>         },
>     }
> });
> ```

> [tab] Go
>
> Update the value of `ClientCredentialsApiTokenIssuer` to reflect the new token issuer value when the FGA client is created:
>
> ```go theme={null}
> fgaClient, err := NewSdkClient(&ClientConfiguration{
>         // ..
>         Credentials: &credentials.Credentials{
>             Method: credentials.CredentialsMethodClientCredentials,
>             Config: &credentials.Config{
>                 // ..
>                 ClientCredentialsApiTokenIssuer: "auth.fga.dev",
>             },
>         },
>     })
> ```

> [tab] .NET
>
> Update the value of `ApiTokenIssuer` to reflect the new token issuer value when the FGA client is created:
>
> ```csharp theme={null}
> var configuration = new ClientConfiguration() {
>     // ..
>     Credentials = new Credentials() {
>         Method = CredentialsMethod.ClientCredentials,
>         Config = new CredentialsConfig() {
>             // ..
>             ApiTokenIssuer = "auth.fga.dev"
>         }
>     }
> };
> ```

> [tab] Python
>
> Update the value of `api_issuer` to reflect the new token issuer value when the FGA client is created:
>
> ```python theme={null}
> credentials = Credentials(
>     method='client_credentials',
>     configuration=CredentialConfiguration(
>         api_issuer= 'auth.fga.dev'
>         # ..
>     )
> )
> ```

> [tab] Java
>
> Update the value provided to `.apiTokenIssuer` to reflect the new token issuer when the FGA client is created:
>
> ```java theme={null}
> var config = new ClientConfiguration()
>   // ..
>   .credentials(new Credentials(
>       new ClientCredentials()
>         // ..
>         .apiTokenIssuer("auth.fga.dev")
> ));
> ```

## Need Help?

Our support team is ready to assist with this transition. If you have any questions or concerns, don’t hesitate to [reach out to our team](https://docs.fga.dev/support.md).