Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove x/macaroon in favor of Biscuit Tokens #1157

Open
Tracked by #1158
prnk28 opened this issue Oct 28, 2024 · 0 comments
Open
Tracked by #1158

Remove x/macaroon in favor of Biscuit Tokens #1157

prnk28 opened this issue Oct 28, 2024 · 0 comments
Assignees
Labels
#OKR Core Team - Project Management #TODO Core Team - Project Management
Milestone

Comments

@prnk28
Copy link
Contributor

prnk28 commented Oct 28, 2024

Description

Macaroons run into the flaw where they rely on HMAC based signatures to produce tokens. On the Sonr Blockchain the KDF function which produces these tokens is deterministic. In order to avoid fraudulent JWT based access - we leverage Biscuit Tokens which fully encode Authorization scopes using public-key cryptography.

Associated Files

  • proto/macaroon/*
  • x/macaroon/*

References

@prnk28 prnk28 added #TODO Core Team - Project Management #OKR Core Team - Project Management labels Oct 28, 2024
@prnk28 prnk28 self-assigned this Oct 28, 2024
@prnk28 prnk28 added this to the v0.6 milestone Nov 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
#OKR Core Team - Project Management #TODO Core Team - Project Management
Projects
Status: Next
Development

No branches or pull requests

1 participant