biscuit-auth/biscuit
1
1
Fork 0
mirror of https://github.com/biscuit-auth/biscuit.git synced 2024-11-04 06:03:38 +03:00
Code Issues Packages Projects Releases Wiki Activity
delegated, decentralized, capabilities based authorization token
15 Commits 32 Branches 0 Tags 1.2 MiB
Rust 96.5%
C++ 3.5%
79a47fc5b7
Go to file
The Fox in the Shell 79a47fc5b7 DESIGN: Fix the critical bounds check in pseudocode 
Issue pointed out by @Geal in review:

  https://github.com/CleverCloud/biscuit/pull/6#discussion_r246476442
2019-01-17 14:25:52 +01:00
assets add a logo 2019-01-07 12:19:08 +01:00
DESIGN.md DESIGN: Fix the critical bounds check in pseudocode 2019-01-17 14:25:52 +01:00
README.md resize the logo 2019-01-07 12:22:56 +01:00

README.md

Biscuit authentication token

logo by Mathias Adam

Biscuit is a (in development) authentication token for microservices architectures with the following properties:

  • distributed authorization: any node could validate the token only with public information
  • offline delegation: a new, valid token can be created from another one by attenuating its rights, by its holder, without communicating with the issuer or the verifier
  • capabilities based: authorization in microservices should be tied to rights related to the request, instead of relying to an identity that might not make sense to the verifier
  • flexible rights managements: the token specifies a pattern based right specification and attenuation syntax taht can map to other rights management systems
  • small enough to fit anywhere (cookies, etc)

Non goals:

  • this is not a new authentication protocol. Biscuit tokens can be used as opaque tokens delivered by other systems such as OAuth
  • revocation: while tokens come with expiration dates, revocation requires external state management