Capability-based security in microservice REST APIs
stratumsecurity.ghost.io