Macarons — Cookies, but Better!
summary
The talk explains a decentralized authentication token design for microservice architectures using 'macarons' (an improved form of cookies/tokens). It presents a mechanism that lets intermediaries attenuate (weaken) token permissions locally so services can reduce privileges without contacting a central authentication service, avoiding a single point of failure.
AI-written summary · about
chapters (8)
- 0:00Beginning
- 0:27What is a Distributed Authorization?
- 3:58Making a Macaron
- 5:39Making Caviar
- 9:08Signature
- 10:15Similarities and Differences
- 13:19Redeployment
- 16:52Questions
related talks
31mAuthentication/Authorization Starters Battle
38mAuthentication as a Microservice: Portable Customer Identity Management
01h 06mMicroservice Authentication and Authorization
23mMicroservice Security at the API Level
27mCookies versus tokens: a paradoxical choice
36mAuth and Distributed Systems: Don’t Throw the Baby Out with the Bathwater of Auth
46mAuth and Distributed Systems: Don't Throw the Baby Out with the Bathwater
44mMicro Frontends and Security