macaroon

Fly.io macaroon implementation (by superfly)

Macaroon Alternatives

Similar projects and alternatives to macaroon

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better macaroon alternative or higher similarity.

macaroon reviews and mentions

Posts with mentions or reviews of macaroon. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-01-31.
  • Macaroons Escalated Quickly
    4 projects | news.ycombinator.com | 31 Jan 2024
    We're not going to use Biscuits. The "single root symmetric key" thing is a systems design challenge for us, not a cryptographic one: we simply isolate the key handling on a software-HSM-like verifier service, running on dedicated hardware. If you're coding authz logic for Fly.io's platform code, your experience will be that you can manipulate and check Macaroon caveats without ever having access to the keys themselves, because we split Macaroon-checking into "verification" and "caveat clearing".

    The threats in this design that would force us to do abrupt key rotations and mass token invalidation are thus pretty much the same as the ones we'd face with Biscuits; the "trusted code base" of key-handling code is comparably small.

    More detail here:

    https://github.com/superfly/macaroon/blob/main/macaroon-thou...

Stats

Basic macaroon repo stats
1
66
8.4
18 days ago

superfly/macaroon is an open source project licensed under Apache License 2.0 which is an OSI approved license.

The primary programming language of macaroon is Go.


Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com