Abstract: Methods, non-transitory computer-readable media, and access control apparatuses are disclosed that, after creating a resource in response to a creation request, provide a resource identifier for the resource and a public key of a key pair to an authorizer service for insertion into a mapping. An authorization request is sent to the authorizer service in response to an operation request to perform an operation on the resource that comprises the resource identifier and a token signed with a private key of the key pair. The authorization request comprises the resource identifier, the operation, and the token and the token identifies a capability. The operation is then executed on the resource when a signature of the token is validated by the authorizer service using the public key retrieved from the mapping and the operation is validated based on a match of the operation and the capability.

Abstract: Methods, non-transitory computer-readable media, and access control apparatuses are disclosed that, after creating a resource in response to a creation request, provide a resource identifier for the resource and a public key of a key pair to an authorizer service for insertion into a mapping. An authorization request is sent to the authorizer service in response to an operation request to perform an operation on the resource that comprises the resource identifier and a token signed with a private key of the key pair. The authorization request comprises the resource identifier, the operation, and the token and the token identifies a capability. The operation is then executed on the resource when a signature of the token is validated by the authorizer service using the public key retrieved from the mapping and the operation is validated based on a match of the operation and the capability.