at.blueharbor.createSession

{
  "id": "at.blueharbor.createSession",
  "defs": {
    "main": {
      "type": "procedure",
      "output": {
        "schema": {
          "type": "object",
          "required": [
            "token",
            "did",
            "expiresAt"
          ],
          "properties": {
            "did": {
              "type": "string",
              "format": "did"
            },
            "token": {
              "type": "string"
            },
            "expiresAt": {
              "type": "integer"
            }
          }
        },
        "encoding": "application/json"
      },
      "description": "The lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined here so the method identifier resolves; the HTTP call itself is served by the BlueHarbor service, not a PDS."
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}