corks_cedar library
Corks are authorization tokens which are based off Google's Macaroons paper. They are bearer tokens which identify the entity possessing them, while providing a mechanism for embedding further restrictions via Cedar policy caveats.