Distributed Authorization and Contextual Caveats for Java with Macaroons and jmacaroons

Google’s Macaroons are a mechanism to establish distributed authorization. The distinction to the classical bearer-token is their ability that they may be used to perform an action under certain restrictions and may then be used to create a new macaroon with stricter restrictions. The following short tutorial demonstrates how to create macaroons, serialize and deserialize them, add first- and third-party caveats and finally to verify them. Figure 1. jmacaroons example...

May 31, 2017 · 4 min · 852 words · Micha Kops