Releases: t10d/guardian
Releases · t10d/guardian
First dev release
JWT is used as a safe way to verify and guard user identity. It is also used to properly encode user's permission scope within programmatic defined system boundaries.
Authorization proposition mostly resembles AERBAC from Rajpoot et al[1]. In simple terms, it is a RBAC model enhanced with attributes that enable context-aware and fine-grained authorization cases.
Module is publicly available through PyPi.
[1]: Attributes Enhanced Role-Based Access Control Model, https://backend.orbit.dtu.dk/ws/files/110988163/AERBAC_TrustBus_20150618_.pdf