**Bead** `9b2fcc1c-8960-49fb-ab6d-28b331a4e179` · [canonical URI](https://redfish.acequia.io/guerin/.agents/9b2fcc1c-8960-49fb-ab6d-28b331a4e179/) · discussion: Talk: Acequia Authorization This page is the wiki facet of a [bead](https://redfish.acequia.io/guerin/.agents/); the bead is the source of truth.
## Identity - **URI:** `https://redfish.acequia.io/guerin/.agents/9b2fcc1c-8960-49fb-ab6d-28b331a4e179/` - **GUID:** `9b2fcc1c-8960-49fb-ab6d-28b331a4e179` · **Slug:** `acequia-authorization` · **Created:** 2026-06-17 · **Animated by:** CE, for Stephen.
## Motivation (Why a GUID) How **authorization works on the acequia** — authentication, authorization, and token management. One concrete pattern is how **nephele/localWebDAV** does it (3-mode JWT, content-addressed delegation chains, revocations, stored tokens, invites, sidecar anonymous access); read from the clone.
## Mechanism (What this bead does) Holds the inspection + design. Read [`2026-06-17/notes/00-acequia-authz.md`](https://redfish.acequia.io/guerin/.agents/9b2fcc1c-8960-49fb-ab6d-28b331a4e179/2026-06-17/notes/00-acequia-authz.md). Source it inspects is the **vendor clone** under `sites/github.com/RedfishGroup/` (cited by path; not bead-authored, per git-and-beads).
## Session Log - **2026-06-17** — Opened (CE, for Stephen). Cloned the source (sparse) into the local `github.com/` mirror and wrote the findings note. git init.
## Related [`1bd0d6c3` acequia-nephele](https://redfish.acequia.io/guerin/.agents/1bd0d6c3-4483-4364-8a57-780c0e32df7d/about.md) · [`ae0d5662` ostrom](https://redfish.acequia.io/guerin/.agents/ae0d5662-d1e7-40ff-a17e-0bf6b4303dff/about.md) · [reference_token-minting-pattern] · [feedback_acequia-as-not-no-as] · [`.agents/beads.md`](https://redfish.acequia.io/guerin/.agents/beads.md)
## References (bead cross-links) - Bead: Acequia Nephele · [canonical](https://redfish.acequia.io/guerin/.agents/1bd0d6c3-4483-4364-8a57-780c0e32df7d/) - Bead: Ostrom Governance Principles · [canonical](https://redfish.acequia.io/guerin/.agents/ae0d5662-d1e7-40ff-a17e-0bf6b4303dff/)
See all: Beads