Lexicon Garden

com.fedproxy.rbac

RBAC policy record granting a requester the ability to register SSH public keys under a specific fedproxy service tunnel. Roles define OIDC token claims that authorize the holder; policies define JSON Schema constraints on com.atproto.repo.createRecord for com.fedproxy.sshPublicKey records.

Repository @johnandersen777.bsky.social did:plc:5svqtrhheairglgiiyvutzik namespace authority
Details · record, key tid
Kindrecord
Record keytid
Authorityfedproxy.com
Indexed
Compare Edit in builder → Fork →
cid bafyreidjxtvzeonqxf5dhjadjxmn4h2dppxwuecukp3wrwjstn33pmvwoy

Checks

Valid
  • field-name-syntax defs.main.record.properties.custom_claims_roles_indexThe field name custom_claims_roles_index should be letters and digits, starting with a letter.
JSONDownload
{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "RBAC policy record granting a requester the ability to register SSH public keys under a specific fedproxy service tunnel. Roles define OIDC token claims that authorize the holder; policies define JSON Schema constraints on com.atproto.repo.createRecord for com.fedproxy.sshPublicKey records.",
      "key": "tid",
      "record": {
        "properties": {
          "createdAt": {
            "format": "datetime",
            "type": "string"
          },
          "custom_claims_roles_index": {
            "description": "Index mapping custom claim keys to role names for fast OIDC token validation lookup.",
            "type": "unknown"
          },
          "policies": {
            "description": "Map of policy name → policy definition. Each policy defines a JSON Schema over com.atproto.repo.createRecord for com.fedproxy.sshPublicKey.",
            "type": "unknown"
          },
          "roles": {
            "description": "Map of role name → role definition. Each role defines OIDC claim constraints (aud, iss, sub) and references a policy name.",
            "type": "unknown"
          }
        },
        "required": [
          "roles",
          "policies",
          "createdAt"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "com.fedproxy.rbac",
  "lexicon": 1
}