Type Aliases
IssuedSessions
Ƭ IssuedSessions:Object
A service issues a session for one resource.
Type declaration
DelegatedSessions
Ƭ DelegatedSessions:Object
A person’s client acts within that person’s current authority.
Type declaration
IssuedSessionPolicy
Ƭ IssuedSessionPolicy:Readonly<{ kind: "issued" ; service: string ; resourceType: string ; role: string ; ancestorRoles: readonly string[] ; operationRoles: Readonly<{ invoke: string ; read: string }> ; beforeVerification: readonly string[] ; evidence: readonly string[] | null ; maxDurationMs: number }>
The policy of a service-issued session.
DelegatedSessionPolicy
Ƭ DelegatedSessionPolicy:Readonly<{ kind: "delegated" ; permissions: readonly string[] | null ; maxDurationMs: number }>
The policy of a person-delegated session.
SessionPolicy
Ƭ SessionPolicy:IssuedSessionPolicy | DelegatedSessionPolicy
Authority has exactly two origins.
Functions
issuedSessions
▸ issuedSessions(options): IssuedSessionPolicy
Declare service-issued authority; the role determines its resource type.
The service must currently be allowed to issue every role.
Parameters
Returns
IssuedSessionPolicy
delegatedSessions
▸ delegatedSessions(options?): DelegatedSessionPolicy
Declare authority delegated by a person. It grants no service roles.
Parameters
Returns
DelegatedSessionPolicy