The macaroon spec has been pretty formalized by Google since 2014, but really there hasn’t been enough adoption to uncover or establish best practices.
But, if successful, one can easily imagine interacting with all their web services as if they were cash businesses.
Pay, get access to whatever you paid for. No need for service providers to build a “user” table or collect payment info. The authorization token with each request tells the server everything it needs to know. Totally stateless.
