Biscuit
Merges concepts from cookies, JWTs, macaroons and Open Policy Agent. “It provide a logic language based on Datalog to write authorization policies. It can store data, like JWT, or small conditions like Macaroons, but it is also able to represent more complex rules like…
- from
- IAM
- added
- 2026-10-10
- likes
- 0
similar
-
Google paper's author compares Macaroons and JWTs news.ycombinator.com
As a consumer/verifier of macaroons, they allow you (through third-party caveats) to defer some authorization decisions to someone else. JWTs don't.
-
Google's Macaroons in Five Minutes or Less web.archive.org
If I'm given a Macaroon that authorizes me to perform some action(s) under certain restrictions, I can non-interactively build a second Macaroon with stricter restrictions that I can then give to you.
-
Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud web.archive.org
Google's original paper.
-
JWT.io jwt.io
Allows you to decode, verify and generate JWT.
-
Open Policy Agent github.com
🆓 An open-source general-purpose decision engine to create and enforce ABAC policies.
-
Cerbos github.com
💸 An authorization endpoint to write context-aware access control policies.
IAM › Authorization > RBAC frameworks: “Merges concepts from cookies, JWTs, macaroons and Open Policy Agent. “It provide a logic language based on Datalog to write authorization policies. It can store data, like JWT, or small conditions like Macaroons, but it is also able to represent more complex rules like…”