Tldr client-server is different than server-server, you should think about your use case and what you need from your auth system, but tptacek thought long and hard about each at two different companies and decided on macaroons in both cases. Good to know!
(Just kidding, ish, and though they're quite long they're not too long and I did read; would recommend.)
(Just kidding, ish, and though they're quite long they're not too long and I did read; would recommend.)