2 ms·
If you're building a product, consider using capability based security.[1] A capability is an access token to a resource, and NOT a user account. Think of it a
by mikewarot 4y ago
If you're building a product, consider using capability based security.[1]
A capability is an access token to a resource, and NOT a user account. Think of it as a $10 bill. If you pull a $10 capability from your wallet, you can't lose $1000 by accident, no matter how badly things go.
Flickr makes it possible to give out a guest pass for photos, for example.[2] The nice thing about a guest pass is you can revoke it at any time.
[1] - https://en.wikipedia.org/wiki/Capability-based_security https://en.wikipedia.org/wiki/Capability-based_security
[2] - https://www.flickrhelp.com/hc/en-us/articles/4404069601172-Create-or-delete-temporary-Guest-Passes-in-Flickr https://www.flickrhelp.com/hc/en-us/articles/4404069601172-C...