English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

A robust authentication and authorization mechanism is imperative in modularsystem development, where modularity and modular thinking are pivotal.Traditional systems often employ identity modules responsible forauthentication and token issuance. Tokens, representing user credentials, offeradvantages such as reduced reliance on passwords, limited lifespan, and scopedaccess. Despite these benefits, the "bearer token" problem persists, leavingsystems vulnerable to abuse if tokens are compromised. We propose a token-basedauthentication mechanism addressing modular systems' critical bearer tokenproblem. The proposed mechanism includes a novel RAF (Recursive AugmentedFernet) token, a blacklist component, and a policy enforcer component. RAFtokens are one-time-use tokens, like tickets. They carry commands, and thereceiver of an RAF token can issue new tokens using the received RAF token. Theblacklist component guarantees an RAF token can not be approved more than once,and the policy enforcer checks the compatibility of commands carried by an RAFtoken. We introduce two variations of RAF tokens: User-tied RAF, offeringsimplicity and compatibility, and Fully-tied RAF, providing enhanced securitythrough service-specific secret keys. We thoroughly discuss the securityguarantees, technical definitions, and construction of RAF tokens backed bygame-based proofs. We demonstrate a proof of concept in the context ofOpenStack, involving modifications to Keystone and creating an RAFT library.The experimental results reveal minimal overhead in typical scenarios,establishing the practicality and effectiveness of RAF. Our experiments showthat the RAF mechanism beats the idea of using short-life Fernet tokens whileproviding much better security.

Recursive Augmented Fernet (RAF) Token: Alleviating the Pain of Stolen Tokens