{"categories":[{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/3"},{"label":"Security","url":"https://skillfed.io/packages/category/security"},{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"PyMacaroons implements macaroons\u2014bearer credentials with embedded authorization caveats that can be created, serialized, and cryptographically verified.","skillfed_tags":["bearer-tokens","authorization-caveats"],"use_cases":["Issue time-limited or resource-scoped bearer tokens for API access without maintaining a separate authorization database.","Delegate authorization to third parties by creating attenuated macaroons with additional caveats that restrict what the delegate can do.","Verify incoming credentials in a service by checking both the signature and the satisfaction of all embedded authorization constraints.","Implement decoupled authorization policy where rules are embedded in the token itself rather than enforced centrally."],"what_it_does":"PyMacaroons is a pure-Python implementation of macaroons, a cryptographic authorization primitive that works like bearer tokens but with embedded authorization constraints called caveats. Unlike opaque tokens, macaroons allow the issuing service to embed specific authorization rules directly into the credential\u2014for example, restricting access to a particular resource or time window\u2014without requiring a separate lookup. The verifier can then check both the cryptographic integrity of the macaroon and whether all embedded caveats are satisfied in the current context.\n\nThe library depends on PyNaCl for cryptographic operations and six for Python 2/3 compatibility. It is designed for portability and ease of installation, trading some speed for the convenience of a pure-Python implementation. The package is stable and dormant, with no active development but a maintained repository; it is suitable for systems that need macaroon support and can tolerate the lack of recent updates.","worth_installing":"Yes, if you need macaroon support and can accept dormant maintenance. The package is stable, has no known vulnerabilities, and low install friction. However, if you require active development, recent Python version support beyond 3.9, or performance-critical use, consider whether libmacaroons bindings or an alternative bearer token scheme better fits your needs."},"id":"pymacaroons","links":{"html":"https://skillfed.io/packages/pymacaroons","md":"https://skillfed.io/packages/pymacaroons.md","pypi":"https://pypi.org/project/pymacaroons/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2018-02-21","license_spdx":null,"license_treatment":"permissive","name":"pymacaroons","python_support":"unspecified","summary":"Macaroon library for Python"},"popularity":{"monthly_downloads":1015507,"position":4502,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"0.13.0"}