games.cavu.getCapabilities
What this bound session may do, as resolved by the host (standard sets expanded to the concrete collections/rkeys for this game). Requires the session token and a DPoP proof.
Details · query
| Kind | query |
|---|---|
| Authority | cavu.games |
| Indexed |
Query
query · GETOutput
application/jsonErrors
AuthRequired
No description in schema.
SessionExpired
No description in schema.
Similar lexicons
semantic matchLexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
games.cavu.bindSession
procedureServed by the game host named in a grant's hostService. The game server presents the grant and its attestation with a DPoP proof (DPoP header, ES256). The host verifies the attestation against the launch service's key, checks the grant is unexpired and names this host, checks `jkt` matches the proof key, consumes the nonce (which it minted for `player`), and binds a session to that key. Later calls (getCapabilities, com.atproto.repo.putRecord, ...) carry `Authorization: DPoP <session>` plus a fr