Hacker GitHub

← All repos

nitram509/macaroons.js

View on GitHub ↗ ★ 80 HTML

Javascript implementation of Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud.

9 mentions on Hacker News by 7 people: 0 stories, 9 comments · first 2015-05-28 · latest 2020-04-02

Mentions per year 9 mentions · busiest year 2018 (3)
20082026
AllStoriesComments NewestTopOldest
  1. …Minutes or Less" https://blog.bren2010.io/2014/12/04/macaroons.html A Javascript implementation: https://github.com/nitram509/macaroons.js
    comment by carapace · 2020-04-02 · in Capability Myths Demolished (2003)
  2. > - immature implementations, I'll just leave this here: https://github.com/nitram509/macaroons.js/blob/master/src/ma... Wow. In case the master changes, here’s the highlighted code: /* XXX get some random bytes instead */ var…
    comment by oefrha · 2020-02-18 · in JWT is Awesome
  3. …needs to be closely coupled with your own. - immature implementations, I'll just leave this here: https://github.com/nitram509/macaroons.js/blob/master/src/ma... JWTs have many problems but compared to Macaroons it's just JSON and base64.…
    comment by Ficirdly · 2020-02-18 · in JWT is Awesome
  4. …appending to a third party caveat changes hash). Then there are implementation errors such as: https://github.com/nitram509/macaroons.js/blob/master/lib/Cr... Some of these issues could be removed by slightly changing implementations but…
    comment by Boulth · 2018-08-30 · in Why JWTs Suck as Session Tokens (2017)
  5. …but ultimately I've decided to just use limited subset of JWT. It's just simpler. [0]: https://github.com/nitram509/macaroons.js/blob/master/lib/Cr...
    comment by Boulth · 2018-08-30 · in Approaching Access Control on the Web (Part I)
  6. …widely used. Oh, did I mention the existing libraries have some rather significant issues [1]? [1]: https://github.com/nitram509/macaroons.js/blob/master/src/ma... So to answer your question: I would gladly see some standarization effort,…
    comment by Shoothe · 2018-01-05 · in Show HN: PAST, a secure alternative to JWT
  7. You mean something like this? https://github.com/nitram509/macaroons.js/blob/master/lib/Cr...
    comment by hdhzy · 2017-10-24 · in Attack of the week: DUHK
  8. …would've designed it better but history is full of counter-examples (see CVE-2017-5689 [1]). [0]: https://github.com/nitram509/macaroons.js/blob/master/src/ma... [1]: https://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5689
    comment by hdhzy · 2017-06-08 · in XSS Attacks: The Next Wave
  9. …[2] http://hackingdistributed.com/2014/05/16/macaroons-are-bette... [3] https://github.com/nitram509/macaroons.js/tree/master
    comment by emin-gun-sirer · 2015-05-28 · in Using JSON Web Tokens to Authenticate JavaScript Front-Ends on Rails