Skip to content

Releases: t10d/guardian

First dev release

13 May 21:05
Compare
Choose a tag to compare

JWT is used as a safe way to verify and guard user identity. It is also used to properly encode user's permission scope within programmatic defined system boundaries.

Authorization proposition mostly resembles AERBAC from Rajpoot et al[1]. In simple terms, it is a RBAC model enhanced with attributes that enable context-aware and fine-grained authorization cases.

Module is publicly available through PyPi.


[1]: Attributes Enhanced Role-Based Access Control Model, https://backend.orbit.dtu.dk/ws/files/110988163/AERBAC_TrustBus_20150618_.pdf