Lexicon Garden

com.fedproxy.rbac

RBAC policy record granting a requester the ability to register SSH public keys under a specific fedproxy service tunnel. Roles define OIDC token claims that authorize the holder; policies define JSON Schema constraints on com.atproto.repo.createRecord for com.fedproxy.sshPublicKey records.

Repository @johnandersen777.bsky.social did:plc:5svqtrhheairglgiiyvutzik namespace authority
Details · record, key tid
Kindrecord
Record keytid
Authorityfedproxy.com
Indexed
Compare Edit in builder → Fork →

Record

record · key tid

Properties

createdAt

requiredstring · datetime

custom_claims_roles_index

unknown

Index mapping custom claim keys to role names for fast OIDC token validation lookup.

policies

requiredunknown

Map of policy name → policy definition. Each policy defines a JSON Schema over com.atproto.repo.createRecord for com.fedproxy.sshPublicKey.

roles

requiredunknown

Map of role name → role definition. Each role defines OIDC claim constraints (aud, iss, sub) and references a policy name.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • com.fedproxy.sshPublicKey

    record

    SSH public key registration record for fedproxy tunnel authentication. Associates an SSH public key with a fedproxy service name so the tunnel can verify connecting clients.