BoundedAuthorityProtocol.V1.GrantFacts (Bounded Authority Protocol v1.0.0)

Copy Markdown View Source

Closed value-bearing, redacted, non-authorizing verified grant facts.

Fields

  • version - the contract-major, always 1.
  • issuer - the verified iss claim.
  • grant_id - the verified jti claim.
  • issuer_key_fingerprint - the raw 32-byte RFC 7638 thumbprint of the trusted issuer public key the caller supplied.
  • holder_thumbprint - the raw 32-byte RFC 7638 thumbprint the grant confirms (cnf.jkt).
  • matched_audience - the expected audience, which the grant's aud contains.
  • issued_at - the grant iat, integer Unix time in seconds.
  • not_before - the grant nbf, integer Unix time in seconds.
  • expires_at - the grant exp, integer Unix time in seconds.
  • authorization - always :not_evaluated: these facts are never an authorization decision.

Summary

Types

t()

Facts from a verified grant.

Types

t()

@type t() :: %BoundedAuthorityProtocol.V1.GrantFacts{
  authorization: :not_evaluated,
  expires_at: integer(),
  grant_id: binary(),
  holder_thumbprint: binary(),
  issued_at: integer(),
  issuer: binary(),
  issuer_key_fingerprint: binary(),
  matched_audience: binary(),
  not_before: integer(),
  version: 1
}

Facts from a verified grant.