Methods and systems for enabling access control based on credential properties

One or more non-transitory computer-readable storage media storing computer-executable instructions that, when executed by a computing system, configure the computing system to perform operations comprising:

• receiving, from a client device, an authentication request message for accessing a server resource, the authentication request message including a credential;
• determining one or more credential properties operable for determining an access right with an access right level of a plurality of different access right levels with respect to the server resource, the one or more credential properties comprising information identifying a strength of the credential that is based at least in part on a complexity of an algorithm utilized to generate the credential and a resource property associated with the server resource that includes a level of security for the server resource:
• and
• transmitting an authentication response message corresponding to the authentication request message, the authentication response message including the credential and the one or more credential properties.

A computer system, comprising:

• a memory that stores computer-executable instructions;
• and a processor configured to access the memory and execute the computer-executable instructions to at least:
• receive, from a client device, an authorization request message for accessing a resource, the authorization request message comprising an authorization code indicating an authentication of a credential;
• generate an access token for accessing the resource based at least in part on the authentication code and one or more credential properties associated with the credential, the access token indicating an access right with an access right level of a plurality of different access right levels with respect to the resource, the one or more credential properties comprising information identifying a strength of the credential that is based at least in part on a complexity of an algorithm utilized to generate the credential and a requestor property associated with the client device for a credential update frequency;
• determine the access right with respect to the resource based at least in part on the one or more credential properties;
• and
• provide an authorization response message to the client device comprising the access token configured to enable access to the resource.