Overview of Fluree Security and Policy
mainFluree provides a multi-layered security model designed to protect data at rest and in transit, while offering fine-grained access control. Key components include:
- Authentication: Supports decentralized identities (DIDs), signed requests, and Bearer tokens via multiple modes (did:key, standalone server tokens, OIDC/OAuth2).
- Data Encryption: Transparent AES-256-GCM encryption for data at rest, configurable via environment variables.
- Commit Integrity: Uses Ed25519 signatures to provide cryptographic proof of which node authored a commit.
- Policy System: A data-centric access control model where policies are stored as RDF triples, allowing for versioning, time-travel, and auditability.