Services need permissions that specify which action is allowed on which resource and under which conditions. This project explores authorization using Biscuit tokens for developers implementing service access rules. It focuses on bounded permissions and delegation, so a service can pass on a narrower permission for a particular task.
- Limit a service permission to a specific action and resource.
- Restrict a delegated token further for a particular recipient or use.
- Check expiration, revocation and organization scope against explicit access rules.
Source code and tests are available in this repository; no package is published to a registry.
- Situation actuelle : Née verte en γ 3.4 ; six politiques datalog vendorées sous gate de dérive contre le pin contracts.
- Maturité : usable
- Exposition : spec-published
- Confiance : medium
- Preuves vérifiées le : 2026-07-30
- Avancement : 50 % du périmètre actuellement déclaré
Explore the Libre AI project catalogue.