{"id":25739478,"url":"https://github.com/eclipse-biscuit/biscuit","last_synced_at":"2026-01-15T22:18:59.477Z","repository":{"id":37715631,"uuid":"164418451","full_name":"eclipse-biscuit/biscuit","owner":"eclipse-biscuit","description":"delegated, decentralized, capabilities based authorization token","archived":false,"fork":false,"pushed_at":"2025-10-21T14:58:11.000Z","size":845,"stargazers_count":1080,"open_issues_count":23,"forks_count":30,"subscribers_count":26,"default_branch":"main","last_synced_at":"2026-01-13T04:12:18.522Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/eclipse-biscuit.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2019-01-07T10:49:25.000Z","updated_at":"2026-01-12T16:41:30.000Z","dependencies_parsed_at":"2023-02-19T05:46:02.935Z","dependency_job_id":"187440e9-06e8-4c65-923c-46a69e452681","html_url":"https://github.com/eclipse-biscuit/biscuit","commit_stats":null,"previous_names":["clevercloud/biscuit","eclipse-biscuit/biscuit","biscuit-auth/biscuit"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/eclipse-biscuit/biscuit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eclipse-biscuit%2Fbiscuit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eclipse-biscuit%2Fbiscuit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eclipse-biscuit%2Fbiscuit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eclipse-biscuit%2Fbiscuit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/eclipse-biscuit","download_url":"https://codeload.github.com/eclipse-biscuit/biscuit/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/eclipse-biscuit%2Fbiscuit/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28472626,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-15T22:13:38.078Z","status":"ssl_error","status_checked_at":"2026-01-15T22:12:11.737Z","response_time":62,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-02-26T08:11:51.794Z","updated_at":"2026-01-15T22:18:59.463Z","avatar_url":"https://github.com/eclipse-biscuit.png","language":"Rust","funding_links":[],"categories":["Rust"],"sub_categories":[],"readme":"# Biscuit authentication/authorization token\n\n[Join the Matrix chat](https://matrix.to/#/#biscuit-auth:matrix.org)\n\n\u003cimg src=\"https://raw.githubusercontent.com/biscuit-auth/biscuit/main/assets/logo-black-white-bg.png\" width=\"200\"\u003e\n\n\u003chttps://www.biscuitsec.org\u003e\n\n## Version\n\nThe stable version of the specification is at [SPECIFICATIONS.md](https://github.com/biscuit-auth/biscuit/blob/main/SPECIFICATIONS.md). The currently in development version is on the [dev branch](https://github.com/biscuit-auth/biscuit/blob/dev/SPECIFICATIONS.md).\n\n## Motivation, goals, non-goals\n\nSee \u003chttps://www.biscuitsec.org/docs/why-biscuit/\u003e. \n\n## Try it out\n\nBiscuit tokens can be created, attenuated, inspected and authorized from your browser: \u003chttps://www.biscuitsec.org/docs/tooling/\u003e\n\n## Roadmap\n\nYou can follow the next steps on the [roadmap](https://github.com/biscuit-auth/biscuit/issues/12).\n\nCurrent status:\n\n- the credentials language, cryptographic primitives and serialization format are done\n- we have implementations for biscuits v3.x in\n  - [Rust](https://github.com/eclipse-biscuit/biscuit-rust)\n  - [Web Assembly](https://github.com/eclipse-biscuit/biscuit-wasm) (based on the Rust version)\n  - [Python](https://github.com/eclipse-biscuit/biscuit-python) (based on the Rust version)\n  - [Haskell](https://github.com/eclipse-biscuit/biscuit-haskell)\n- we have implementations for biscuits v1 in\n  - [Java](https://github.com/eclipse-biscuit/biscuit-java) (implementation of v3.3 is in progress)\n  - [Go](https://github.com/eclipse-biscuit/biscuit-go)\n  - [.Net](https://github.com/dmunch/biscuit-net)\n- a website with documentation and an interactive playground is live at \u003chttps://biscuitsec.org\u003e\n- Currently deploying to real world use cases such as [Apache Pulsar](https://github.com/clevercloud/biscuit-pulsar) at [Clever Cloud](https://www.clever-cloud.com/)\n- looking for an audit of the token's design, cryptographic primitives and implementations\n\n## Feature support\n\nThe different implementations are following the specification closely, but parts of it may take some time to be fully implemented, so here is the current list of supported features per version:\n\n* ✅ full support\n* 🚧 partial support\n* ❌ not supported yet\n\n|                    | Rust | Haskell | Java | Go | Python | C# |\n|--------------------|------|---------|------|----|--------|----|\n|**v3.0**            |  ✅  |    ✅   |  ✅  | ✅ |   ✅   | ✅ |\n|**v3.1**            |  ✅  |    ✅   |  🚧  | ❌ |   ✅   | ✅ |\n| scopes             |  ✅  |    ✅   |  ✅  | ❌ |   ✅   | ✅ |\n| check all          |  ✅  |    ✅   |  ✅  | ❌ |   ✅   | ✅ |\n| bitwise operations |  ✅  |    ✅   |  ✅  | ❌ |   ✅   | ✅ |\n| snapshots          |  ✅  |    ❌   |  🚧  | ❌ |   ✅   | ❌ |\n|**v3.2**            |  ✅  |    ✅   |  🚧  | ❌ |   ✅   | ✅ |\n| third party blocks |  ✅  |    ✅   |  🚧  | ❌ |   🚧   | ✅ |\n|**v3.3**            |  ✅  |    ✅   |  🚧  | ❌ |   ✅   | ✅ |\n\n\n## How to help us?\n\n- provide use cases that we can test the token on (some specific kind of checks, auth delegation, etc)\n- cryptographic design audit: we need reviews of algorithms, their usage and implementation in various languages\n- add support for biscuit v3.2 to java and go implementations\n\n## Project organisation\n\n- `SPECIFICATIONS.md` is the description of Biscuit, its format and behaviour\n- `biscuit-web-key/` is a specification for publishing biscuit public keys\n- `DESIGN.md` holds the initial ideas about what Biscuit should be\n- `experimentations/` holds initial code examples for the crypographic schemes and caveat language. `code/biscuit-poc/` contains an experimental version of Biscuit, built to explore API issues\n\n## License\n\nLicensed under Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or http://www.apache.org/licenses/LICENSE-2.0)\n\nlogo by Julien Richard\n\noriginally created at [Clever Cloud](https://www.clever-cloud.com/)\n\n### Contribution\n\nUnless you explicitly state otherwise, any contribution intentionally\nsubmitted for inclusion in the work by you, as defined in the Apache-2.0\nlicense, shall be licensed as above, without any additional terms or\nconditions.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Feclipse-biscuit%2Fbiscuit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Feclipse-biscuit%2Fbiscuit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Feclipse-biscuit%2Fbiscuit/lists"}