tree ef59143cd894f643290576bd46c083e7fb1dc8a4
parent 131b889d1874954196791ce1c380e4ee683d2e66
author Vitaly Buka <vitalybuka@google.com> 1450831822 -0800
committer Vitaly Buka <vitalybuka@google.com> 1450835703 +0000

Switch to macaroon library to generate and parse access tokens

We need access tokens to store signed time, user id and scope.
Macaroon library provides exactly this functionality. So we can reuse
that and remove some of our generating/parsing code.

Access token is not expected to be parsed by clients. Client can't
remove caveats from macaroon. Adding new caveats is possible, but code
will reject such extended tokens because number of caveat was changed.

Change-Id: I3f3a4a972cad061fe6ac75eb906a5b299e75d13d
Reviewed-on: https://weave-review.googlesource.com/2084
Reviewed-by: Vitaly Buka <vitalybuka@google.com>