Eclipse Biscuit provides flexible authorization in distributed systems. Inspired by macaroons, it improves on their limitations by providing public key cryptography and a structured authorization language while still providing offline attenuation.
Eclipse Biscuit provides an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language.
The project scope covers:
- a specification for an authorization token, cryptographic signatures, and a logic language for authorization
- a reference implementation in rust published as a library
- implementations in other languages (java, haskell, python, javascript)
- a CLI tool and web components
Eclipse Biscuit provides an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language.
Biscuit is a key component of 3DS Outscale's IAM and other european projects.
It needs to be backed by an european structure to sustain its growth.
It provides a state-of-the-art distributed authorization system that can be readily used by other solutions, in a polyglot environment.
There are a few ongoing initiatives:
- bring other libraries on par with the reference implementation (biscuit-java, biscuit-go)
- incremental improvements on the authorization language
Biscuit is already published and used in production in different places.
An incremental update of the authorization language is planned for Q4 2024.
Support for more cryptographic primitives is ongoing in biscuit-rust and biscuit-java.
For Q4 2024 and 2025 we target improvements to the spec definition and its conformance suite, as well as making all libraries feature-complete.
Outscale
Clever Cloud (production user of biscuit-java and biscuit-rust)
- specification (+ a conformance suite) https://github.com/biscuit-auth/biscuit
- rust implementation https://github.com/biscuit-auth/biscuit-rust
- java implementation https://github.com/biscuit-auth/biscuit-java
- JS implementation https://github.com/biscuit-auth/biscuit-wasm
- Python implementation https://github.com/biscuit-auth/biscuit-python
- cli https://github.com/biscuit-auth/biscuit-cli
- web components (based on the rust implementation) https://github.com/biscuit-auth/biscuit-web-components
- Log in to post comments