full diff

town.muni.arbiter.proxy

zicklag.dev +5 −1

← Back to Compare Lexicon page

From

bafyreihuddn6enptxoasbpouutdadiz57ckwh6mx4mzjveytt3ceyywps4 indexed 2026-08-10 17:41 UTC View this version

bafyreigr74gw3dpqkngh44gshshmcdybtmbbm5xt6vasrnsbsnxo2oul7u indexed 2026-08-25 19:16 UTC View this version

Compatibility

backward compatible Backward compatible. 2 non-breaking changes.

Non-breaking changes (2)

AddedVertex AddedVertex { vertex_id: "town.muni.arbiter.proxy:input.encoding" }
AddedEdge AddedEdge { src: "town.muni.arbiter.proxy:input", tgt: "town.muni.arbiter.proxy:input.encoding", kind: "prop", name: Some("encoding") }

Migration guidance

Added

AddedVertex { vertex_id: "town.muni.arbiter.proxy:input.encoding" }

Notes

Non-breaking: AddedEdge { src: "town.muni.arbiter.proxy:input", tgt: "town.muni.arbiter.proxy:input.encoding", kind: "prop", name: Some("encoding") }

Changes

11{

22 "$type": "com.atproto.lexicon.schema",

33 "defs": {

44 "main": {

      "description": "Proxied XRPC request through an arbiter's policy.\n\nThe caller authenticates via serviceAuth (aud = arbiter-server DID,\nlxm = town.muni.arbiter.proxy). The body specifies the arbiter DID to act\non behalf of, the target DID#service to reach, and the inner XRPC\nrequest (method, nsid, parameters, body) to evaluate. The server drives\nthe arbiter's Rego policy and proxies the inner request to the target\nauthenticated as the stewarded account.\n\nThe `nsid` here is the *inner* request NSID, distinct from this\nprocedure's own NSID.",

66 "errors": [

77 {

88 "description": "The requesting user is not allowed to proxy through this arbiter.",

99 "name": "ErrPermissionDenied"

1010 }

1111 ],

1212 "input": {

1313 "encoding": "application/json",

1414 "schema": {

1515 "properties": {

1616 "arbiterDid": {

1717 "description": "The stewarded account's DID to act on behalf of.",

1818 "format": "did",

1919 "type": "string"

2020 },

2121 "body": {

22 "description": "Optional JSON body for the inner request.",

              "description": "Optional body for the inner request. A JSON value is proxied as JSON; the AT Protocol binary marker { \"$bytes\": <base64> } proxies raw bytes (e.g. a blob upload).",

2323 "type": "unknown"

2424 },

25 "encoding": {

              "description": "Optional content-type (encoding) for the inner request body (e.g. image/png). Defaults to application/json.",

27 "type": "string"

28 },

2529 "method": {

2630 "description": "HTTP method for the inner XRPC request (GET, POST, etc).",

2731 "type": "string"

2832 },

2933 "nsid": {

3034 "description": "The inner XRPC request NSID.",

3135 "type": "string"

3236 },

3337 "parameters": {

3438 "description": "Optional query parameters for the inner request.",

3539 "type": "unknown"

3640 },

3741 "target": {

3842 "description": "The destination DID#service for the proxied request (e.g. did:plc:xyz#atproto_pds).",

3943 "type": "string"

4044 }

4145 },

4246 "required": [

4347 "arbiterDid",

4448 "target",

4549 "method",

4650 "nsid"

4751 ],

4852 "type": "object"

4953 }

5054 },

5155 "output": {

5256 "encoding": "application/json",

5357 "schema": {

5458 "description": "The body of the inner XRPC response.",

5559 "properties": {},

5660 "type": "object"

5761 }

5862 },

5963 "type": "procedure"

6064 }

6165 },

6266 "id": "town.muni.arbiter.proxy",

6367 "lexicon": 1