Authorization

Operationalizing MacaroonsOriginal article link with an AI-written directory summary

Thomas Ptacek describes how Fly.io operates Macaroon bearer tokens in practice. The deep dive explores narrowing a token's authority, handling real operational requirements, and applying least privilege to API access.

Guide · Authorization · Software Security