Open authorization claim scheme to secure resources

A method, comprising:

• under control of one or more processors of a resource server configured with executable instructions:
• receiving, from a client device:
• a request to authorize the client device to obtain a requested resource from the resource server;
• and
• a token comprising a hypertext transfer protocol (HTTP) method set represented by bitwise ORing of a respective bit of each HTTP method to which the client device is allowed access;
• interpreting data of the token according to a domain specific language, wherein the interpreting derives at least one rule associated with the HTTP method set from among a range of resource access control rules;
• comparing the at least one rule against the request;
• and
• allowing or rejecting the request based at least in part on the comparing.

A method implemented at least in part by a meter, the method comprising:

• receiving, at the meter and from a resource server, a command to perform an action, the command being received based at least in part on the resource server having received a token from an authorization server, wherein the token comprises:
• resource access control rules that are represented using a domain specific language defined by a context-free grammar that expresses one or more hypertext transfer protocol (HTTP) methods that define a set of HTTP requests, wherein the domain specific language has syntax and grammar for representing the resource access control rules as claim values for use in a representational state transfer (RESTful) application programming interface (API) that shows a language and context-free grammar in extended Backus-Naur form (EBNF), wherein the domain specific language defines a flexible and extensible set of access control rules for the API;
• and
• a claim that is expressed using the one or more HTTP methods and a pattern of URIs that define the set of HTTP requests;
• and
• based at least in part on receipt of the command at the meter, performing the action.