Biscuit: pubkey signed token with offline attenuation and Datalog authz policies

Comments, chapters, ... Slides Search
Loading Click here to add:
Subscribe to notifications

When subscribed to notifications, an email will be sent to you for all added annotations.

Your user account has no email address.

Information on this media

32 views
Biscuit is a new kind of authorization token that merges the public key signatures of JWT, with offline attenuation and caveats from macaroons. It comes with a Datalog based language to express policies, that can be provided by the token or the server side.
This feature set unlocks powerful use cases like multitenant systems that need flexible authorization policies, or chains of microservices requests with locked down bearer tokens

Geoffroy Couprie is R&D and security at Clever Cloud. I mess with Rust, parsers and cryptography

Creation date: July 6, 2021
Speakers: Geoffroy Couprie
License: CC BY-SA v4
Links:

Other media in the channel "2021"