This library intends supporting the development of Solid applications reading and writing data in Solid servers. Data should always be considered sensitive and be processed with care and regards to access restrictions and personal information.

For a better separation of concerns, this library does not deal directly with authentication. In order to make authenticated requests, one should inject a fetch function compatible with the browser-native fetch API dealing with authentication. This may be done using Inrupt's authentication libraries for Node or for the browser. The security policy for these libraries is available in the associated GitHub repository.

This library also exposes functions to modify data access permissions. We strive to make the API and documentation as clear and intuitive as possible, because misuse of these functions may result in exposing data beyond what is intended. Please do open an issue if you face difficulties with our access control APIs.

If you discover a vulnerability in our code, or experience a bug related to security, please report it following the instructions provided on Inrupt’s security page.