mirror of
https://github.com/biscuit-auth/biscuit.git
synced 2024-10-05 18:17:22 +03:00
delegated, decentralized, capabilities based authorization token
assets | ||
biscuit-web-key | ||
experimentations | ||
samples | ||
DESIGN.md | ||
LICENSE | ||
README.md | ||
schema.proto | ||
SECURITY.md | ||
SPECIFICATIONS.md |
Biscuit authentication/authorization token
Version
The stable version of the specification is at SPECIFICATIONS.md. The currently in development version is on the dev branch.
Motivation, goals, non-goals
See https://www.biscuitsec.org/docs/why-biscuit/.
Try it out
Biscuit tokens can be created, attenuated, inspected and authorized from your browser: https://www.biscuitsec.org/docs/tooling/
Roadmap
You can follow the next steps on the roadmap.
Current status:
- the credentials language, cryptographic primitives and serialization format are done
- we have implementations for biscuits v2 in
- Rust
- Web Assembly (based on the Rust version)
- Python (based on the Rust version)
- Haskell
- we have implementations for biscuits v1 in
- a website with documentation and an interactive playground is live at https://biscuitsec.org
- Currently deploying to real world use cases such as Apache Pulsar at Clever Cloud
- looking for an audit of the token's design, cryptographic primitives and implementations
How to help us?
- provide use cases that we can test the token on (some specific kind of checks, auth delegation, etc)
- cryptographic design audit: we need reviews of algorithms, their usage and implementation in various languages
- add support for biscuit v2 to java and go implementations
Project organisation
SPECIFICATIONS.md
is the description of Biscuit, its format and behaviourbiscuit-web-key/
is a specification for publishing biscuit public keysDESIGN.md
holds the initial ideas about what Biscuit should beexperimentations/
holds initial code examples for the crypographic schemes and caveat language.code/biscuit-poc/
contains an experimental version of Biscuit, built to explore API issues
License
Licensed under Apache License, Version 2.0, (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
logo by Mathias Adam
originally created at Clever Cloud
Contribution
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be licensed as above, without any additional terms or conditions.