notes/token_exchange_in_iroh_auth.org

This commit is contained in:
Yann Esposito (Yogsototh) 2022-06-01 11:18:51 +02:00
parent 37818eb1a8
commit e8835fd53a
Signed by untrusted user who does not match committer: yogsototh
GPG key ID: 7B19A4C650D59646

View file

@ -121,4 +121,5 @@ Once the subject is selected, the client could then use the Token Exchange with:
- a ~subject_token~ retrieved from the previous call. This should be a JWT signed - a ~subject_token~ retrieved from the previous call. This should be a JWT signed
by IROH-Auth. I think it would be safe to have an infinite or at least very by IROH-Auth. I think it would be safe to have an infinite or at least very
long lifetime for these JWT. long lifetime for these JWT.
- - an ~access_token~ generated from the client object handled to the client. This
way IROH-Auth could authenticate the client.