Oberon makes it possible for a service provider to issue capability tokens to clients in such a way that the service provider never sees the value of the capability token. This prevents the service provider from being able to impersonate the client.
Oberon relies upon zero-knowledge proof presentation of the capability token so that the token is never transmitted norrevealed. Instead of the client sending the token to the service—as is done with API tokens today—the client sends a zero-knowledge proof proving that they have a valid capability token issued by the service provider; this is called proof-of-knowledge.GitHub: https://github.com/cryptidtech/oberoncryptid
Get cryptid: https://www.cryptid.tech]