Tower is an ecosystem of Rust libraries built to provide and enable reusable abstractions for request-reply-based services. From their GitHub:
Tower aims to make it as easy as possible to build robust networking clients and servers. It is protocol agnostic, but is designed around a request / response pattern. If your protocol is entirely stream based, Tower may not be a good fit.
Biscuit is a new set of standards centered around authorization. More specifically, Biscuit is:
- A language to describe authorization patterns (Datalog-based).
- A binary format for asymmetrically-signed bearer tokens (also allowing attenuation).
- Implementations of those standards.
So Tower is all about providing abstractions over service architectuers, and Biscuits are a new pattern for scalable, flexible authorization for services.
This library is about exploring ways to expose Biscuit authorization as reusable Tower abstractions. We currently have a very crude first draft of an authorization layer where the downstream user provides ways to extract facts from the request type, and the layer blocks bad requests by being a tower::filter::Filter.
Contributions are welcome, including suggestions for a complete redesign.