UCANs, or User Controlled Authorization Networks, are a trustless, secure, user-originated authorization and revocation scheme. They are an extension of the popular JSON Web Token format specifically designed to enable ways of authorizing offline-first apps and distributed systems.