Abstract: Example techniques described herein involve authorization management in a media playback system. Within examples, a client, such as a control device, may authenticate with a playback device using a token. The playback device may resolve a role corresponding to the token using a token-to-role mapping hosted at an authentication service. After resolving the role, the playback device may resolve a permissions set corresponding to the role using a role-to-permissions mapping similarly hosted at the authentication service. Within examples, such mappings may be cached locally at the edge (e.g., on a playback device).

Abstract: Examples described herein involve edge data caching in a media playback system. A media play back system may include playback devices that controllable using a controller, such as a control application installed on a mobile device via network messaging (e.g., via a LAN). Yet further, cloud servers may provide platform services that support the playback devices and the controllers of the media playback system. In example systems, edge computing resources of the players are leveraged to offload storage and processing that would otherwise be performed in the cloud (i.e., by the platform servers). For instance, within a media playback system, one or more players may cache data hosted by the platform servers (e.g., state information), thereby allowing some requests from clients such as the controllers and other players to be handled locally rather than by the platform servers in the cloud.

Abstract: Example techniques described herein involve authorization management in a media playback system. Within examples, a client, such as a control device, may authenticate with a playback device using a token. The playback device may resolve a role corresponding to the token using a token-to-role mapping hosted at an authentication service. After resolving the role, the playback device may resolve a permissions set corresponding to the role using a role-to-permissions mapping similarly hosted at the authentication service. Within examples, such mappings may be cached locally at the edge (e.g., on a playback device).

Abstract: Multi-user media playback systems are disclosed. In an example, a main account associated with a media playback system can invite additional accounts to access resources of the media playback system. An explicit association between the additional accounts and one or more of: the main account or the resources of the media playback system can be generated and stored based on the invite. When an access request to access a particular resource of the media playback system is received from a particular additional account, it can be determined whether the additional account has access to the particular resource based on an explicit association between the particular additional account and the particular resource and/or based on one or more implicit associations. In some examples, the one or more implicit associations can be derived from a topology of the media playback system.

Abstract: Example techniques described herein involve authorization management in a media playback system. Within examples, a client, such as a control device, may authenticate with a playback device using a token. The playback device may resolve a role corresponding to the token using a token-to-role mapping hosted at an authentication service. After resolving the role, the playback device may resolve a permissions set corresponding to the role using a role-to-permissions mapping similarly hosted at the authentication service. Within examples, such mappings may be cached locally at the edge (e.g., on a playback device).