📄️ Verifier plugin
Integrate verifiers plugins into your Otoroshi routes to check the validity of Biscuit tokens and add your own rules to verify those tokens.
📄️ Attenuator plugin
When attenuating a Biscuit token from sources such as headers, cookies, or query parameters, the process begins by extracting and validating the original token.
📄️ Client Credentials plugin
this plugin can be used to implement the OAuth2 clientcredentials flow with the accesstoken being a biscuit.
📄️ Exposing Biscuit Public Keys
Biscuit tokens rely on public key cryptography for secure, decentralized authorization. To enable verification, public keys need to be exposed to services that will validate Biscuit tokens.
📄️ Biscuit User Extractor plugin
The Biscuit User Extractor plugin enables you to extract user-related information from a Biscuit token and inject it into the request context as an authenticated user.
📄️ User to Biscuit Token Plugin
This plugin enables seamless authentication by generating a Biscuit Token from the current connected user (from Otoroshi auth. modules), and injecting it into the request as a valid authentication token.
📄️ Biscuit to ApiKey Bridge Plugin
The Biscuit API Key Bridge Plugin is a pre-routing plugin that can extracts an API key from an incoming Biscuit Token, ensuring secure access control, quotas, etc.
📄️ Remote token fetcher
Similar to the "Biscuit to user" and "apikey bridge" plugins, this plugin retrieves a Biscuit token based on the