Re: The ezcap-express library

Sounds like a good way to get people to understand the basics, but you
might have simplified too much.  Attenuated delegation is key to capability
systems, but I didn't see that in your write-up.  Maybe you can add some
examples in your Github repository.

--------------
Alan Karp


On Sun, Apr 4, 2021 at 7:09 AM Manu Sporny <msporny@digitalbazaar.com>
wrote:

> The previous post "The ezcap library" dealt with an easy to use client
> library
> for software developers. This post is about "ezcap-express", a *server*
> library for software developers.
>
> ezcap-express (pronounced "Easy Cap Express") - Node.js connect middleware
> that provides easy Authorization Capability (zcap) support for express.js
> HTTP
> servers and more.
>
> This library provides node.js express middleware that can be used to
> protect
> resources on HTTP servers using Authorization Capabilities (zcaps). The
> library is configured with secure and sensible defaults to help developers
> get
> started quickly and ensure that their server code is production-ready.
>
> The same security and design characteristics in the previous post apply to
> this library:
>
> https://lists.w3.org/Archives/Public/public-credentials/2021Apr/0038.html
>
> You can read more about the server API and how to use it here:
>
> https://github.com/digitalbazaar/ezcap-express/
>
> -- manu
>
> --
> Manu Sporny - https://www.linkedin.com/in/manusporny/
> Founder/CEO - Digital Bazaar, Inc.
> blog: Veres One Decentralized Identifier Blockchain Launches
> https://tinyurl.com/veres-one-launches
>
>
>