{
"id": "app.didpic.identity.mintWidgetToken",
"defs": {
"main": {
"type": "procedure",
"output": {
"schema": {
"type": "object",
"required": [
"token",
"expiresAt"
],
"properties": {
"token": {
"type": "string",
"description": "Opaque bearer token. Use as `Authorization: Bearer <token>` directly against the AppView for allowed methods. Always prefixed with `dpwt_`."
},
"expiresAt": {
"type": "string",
"format": "datetime"
}
}
},
"encoding": "application/json"
},
"description": "Mint a long-lived opaque bearer token bound to the authenticated viewer's DID, scoped to widget-readable methods only. The iOS home-screen widget uses this so it doesn't need to port DPoP signing into Swift. Returns the raw token (only shown once) plus its expiry. Tokens never expire any prior tokens — the old one keeps working until its own expiry."
}
},
"$type": "com.atproto.lexicon.schema",
"lexicon": 1
}