org.tangled.repo.mintToken

tangled.org

Documentation

Mint a service-auth JWT whose issuer is this repo's DID, signed by the knot that owns the repo's signing key. When calling this, you'll need the same perms as git push, ie. being repo owner/collaborator/knot-admin.

main procedure

Mint a service-auth JWT whose issuer is this repo's DID, signed by the knot that owns the repo's signing key. When calling this, you'll need the same perms as git push, ie. being repo owner/collaborator/knot-admin.

Input

Encodingapplication/json
aud stringdid Required

Audience of the minted token, a DID service ref for the service, that the token is addressed to.

exp integerint64 Required

Unix seconds. Must be in the future, and at most 60s after mint time.

lxm stringnsid Required

Lexicon method to which minted token binds.

repo stringdid Required

DID of the repo that becomes the token's issuer. Must be the audience of a given calling session.

Output

Encodingapplication/json
token string Required

The signed service-auth JWT.

Try It

Requests are sent directly from your browser. Some servers may block requests due to CORS.

Base URL for XRPC calls (e.g., https://bsky.social)
Enter valid JSON for the request body
View raw schema 
{
  "description": "Mint a service-auth JWT whose issuer is this repo's DID, signed by the knot that owns the repo's signing key. When calling this, you'll need the same perms as git push, ie. being repo owner/collaborator/knot-admin.",
  "input": {
    "encoding": "application/json",
    "schema": {
      "properties": {
        "aud": {
          "description": "Audience of the minted token, a DID service ref for the service, that the token is addressed to.",
          "format": "did",
          "type": "string"
        },
        "exp": {
          "description": "Unix seconds. Must be in the future, and at most 60s after mint time.",
          "format": "int64",
          "type": "integer"
        },
        "lxm": {
          "description": "Lexicon method to which minted token binds.",
          "format": "nsid",
          "type": "string"
        },
        "repo": {
          "description": "DID of the repo that becomes the token's issuer. Must be the audience of a given calling session.",
          "format": "did",
          "type": "string"
        }
      },
      "required": [
        "repo",
        "aud",
        "lxm",
        "exp"
      ],
      "type": "object"
    }
  },
  "output": {
    "encoding": "application/json",
    "schema": {
      "properties": {
        "token": {
          "description": "The signed service-auth JWT.",
          "type": "string"
        }
      },
      "required": [
        "token"
      ],
      "type": "object"
    }
  },
  "type": "procedure"
}

Lexicon Garden

@