zone.stratos.actor.enrollment
Schema Diff
+1 -1
Compatibility Analysis
Backward Compatible
No changes detected.
1
1
{
2
2
"$type": "com.atproto.lexicon.schema",
3
3
"defs": {
4
4
"main": {
5
5
"description": "A record indicating the user is enrolled in a Stratos service. Published to the user's PDS during OAuth enrollment for endpoint discovery by AppViews. Multiple enrollment records are supported — one per Stratos service.",
6
6
"key": "any",
7
7
"record": {
8
8
"properties": {
9
9
"attestation": {
10
10
"description": "Service attestation vouching for the user's enrollment, boundaries, and signing key.",
11
11
"ref": "#serviceAttestation",
12
12
"type": "ref"
13
13
},
14
14
"boundaries": {
15
-
"description": "List of boundaries the user has access to on this Stratos service.",
15
+
"description": "Service-qualified boundaries the user has access to on this Stratos service, each in '{serviceDid}/{domainName}' format.",
16
16
"items": {
17
17
"ref": "zone.stratos.boundary.defs#Domain",
18
18
"type": "ref"
19
19
},
20
20
"maxLength": 50,
21
21
"type": "array"
22
22
},
23
23
"createdAt": {
24
24
"description": "Timestamp when the enrollment was created.",
25
25
"format": "datetime",
26
26
"type": "string"
27
27
},
28
28
"service": {
29
29
"description": "The Stratos service endpoint URL where this user's private data is stored.",
30
30
"format": "uri",
31
31
"type": "string"
32
32
},
33
33
"signingKey": {
34
34
"description": "The user's P-256 public key as a did:key string, generated by the Stratos service for user-level record signing.",
35
35
"type": "string"
36
36
}
37
37
},
38
38
"required": [
39
39
"service",
40
40
"signingKey",
41
41
"attestation",
42
42
"createdAt"
43
43
],
44
44
"type": "object"
45
45
},
46
46
"type": "record"
47
47
},
48
48
"serviceAttestation": {
49
49
"description": "An attestation signed by the Stratos service key. The signed payload is DAG-CBOR encoded {boundaries, did, signingKey} with sorted keys.",
50
50
"properties": {
51
51
"sig": {
52
52
"description": "Raw signature bytes of the DAG-CBOR encoded attestation payload, signed by the service key.",
53
53
"type": "bytes"
54
54
},
55
55
"signingKey": {
56
56
"description": "The Stratos service's public key as a did:key string, used to verify the attestation signature.",
57
57
"type": "string"
58
58
}
59
59
},
60
60
"required": [
61
61
"sig",
62
62
"signingKey"
63
63
],
64
64
"type": "object"
65
65
}
66
66
},
67
67
"id": "zone.stratos.actor.enrollment",
68
68
"lexicon": 1
69
69
}