rescrv/libmacaroons
View on GitHub ↗ ★ 518 C
Macaroons are flexible authorization credentials that support decentralized delegation, attenuation, and verification.
7 mentions on Hacker News by 6 people: 0 stories, 7 comments · first 2014-05-16 · latest 2018-12-27
20082026
-
…significant downsides? [1]: http://hackingdistributed.com/2014/05/16/macaroons-are-bette... [2]: https://github.com/rescrv/libmacaroons
comment by nine_k · 2018-12-27 · in Ask HN: What do you use for authentication and authorization? -
…JWT to something real? [1] https://static.googleusercontent.com/media/research.google.c... [2] https://github.com/rescrv/libmacaroons
comment by sarcasmic · 2018-06-13 · in A Child’s Garden of Inter-Service Authentication Schemes -
…to create the macaroon, but doesn't give anyone else a clue as to the contents of the secret. [0]: https://github.com/rescrv/libmacaroons/blob/master/README I'd say that the biggest difference between JWT and Macaroons is that Macaroons…
comment by hdhzy · 2017-07-09 · in API Security Checklist for developers -
…provides better security: Fernet or Macaroons. https://github.com/fernet/spec/blob/master/Spec.md https://github.com/rescrv/libmacaroons You'll need to implement claim validation and expiry validation all by yourself. Fernet is probably…
comment by unscaled · 2017-07-09 · in API Security Checklist for developers -
…next 10 minutes without contacting third party. That'd be very useful for OAuth like flows... [0]: https://github.com/rescrv/libmacaroons/blob/master/README
comment by hdhzy · 2017-05-08 · in Things to Use Instead of JSON Web Tokens -
…isn't as big as it may appear. There is an open source library that is less than 2K lines of C: https://github.com/rescrv/libmacaroons/blob/master/macaroons... What I described is probably 200 lines of C or less. Again you are just…
comment by chubot · 2014-12-26 · in When security goes right -
Code here: https://github.com/rescrv/libmacaroons
comment by rescrv · 2014-05-16 · in Macaroons are better than cookies