Giters

authorizerdev / authorizer

Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.

Home Page:https://authorizer.dev

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Paseto support

itpropro opened this issue · comments

commented

Integrating Paseto (Platform-Agnostic Security Tokens) support as an alternative to JWTs can address some inherent JWT (JSON Web Tokens) issues and enhance Authorizer's capabilities.

Advantages of Paseto over JWT:

  • Enhanced security with a simpler design preventing critical vulnerabilities.
  • Mandatory secure default algorithm, reducing risks associated with algorithm misconfiguration.
  • Built-in versioning for better token validation management.
  • Clearer, more concise specifications leading to fewer implementation errors.
  • Better error handling aiding in easier debugging.
  • Reduced token size for optimized performance.

Supporting Paseto tokens will bolster security, streamline token management, and potentially optimize performance, aligning Authorizer with modern security best practices.

Support for version 3 and 4 only should be fine, no backwards compatibility for v1/2 needed.
The best known Go library for Paseto is go-paseto, which has everything authorizer would need.