biscuit-auth/biscuit
1
1
Fork 0
mirror of https://github.com/biscuit-auth/biscuit.git synced 2024-09-11 14:26:04 +03:00
Code Issues Packages Projects Releases Wiki Activity
27e22393f6
biscuit/README.md
Geoffroy Couprie 27e22393f6 add the logic language to the specification
2019-03-06 14:49:43 +01:00

1.3 KiB
Raw Blame History

Biscuit authentication token

Join the chat at https://gitter.im/CleverCloud/biscuit

logo by Mathias Adam

Biscuit is a (in development) authentication token for microservices architectures with the following properties:

  • distributed authorization: any node could validate the token only with public information;
  • offline delegation: a new, valid token can be created from another one by attenuating its rights, by its holder, without communicating with anyone;
  • capabilities based: authorization in microservices should be tied to rights related to the request, instead of relying to an identity that might not make sense to the verifier;
  • flexible rights managements: the token uses a logic language to specify attenuation and add bounds on ambient data;
  • small enough to fit anywhere (cookies, etc).

Non goals:

  • This is not a new authentication protocol. Biscuit tokens can be used as opaque tokens delivered by other systems such as OAuth.
  • Revocation: while tokens come with expiration dates, revocation requires external state management.