app.didpic.identity.getFastPathToken

Exchange a proxied service-auth call for a short-lived direct-access token bound to the viewer's DID.

Details · procedure
Kindprocedure
Authorityidentity.didpic.app
Indexed

Procedure

procedure · POST

Output

application/json

expiresAt

requiredstring · datetime

token

requiredstring

Bearer token for direct calls to allowed methods.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Renew a still-valid fast-path token before it expires. Confidential-client devices only — see app.didpic.identity.getFastPathToken for the public-client mint, which this does not replace.

  • Get a signed token on behalf of the requesting DID for the requested service.

  • The lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined here so the method identifier resolves; the HTTP call itself is served by the BlueHarbor service, not a PDS.