Add support for biscuit tokens

tionis / patchwork

A simple communication backend using ssh-keys for auth

https://patch.tionis.dev

MIT License

0 stars 0 forks source link

Open tionis opened 2 weeks ago

tionis commented 2 weeks ago

This would allow users to create narrower scope tokens without having to sign it with the original key

tionis commented 1 week ago

It would also allow narrower scopes than just read/write path patterns. Tokens could be limited by:

source IP (e.g. GitHub's IPs for github webhooks)
time of day
type (pubsub/blockpub etc) (less about security and more about ensuring correct operation)

tionis commented 1 week ago

Should be done, but I haven't tested it due to being confused on how to correctly implement the policies