Expand description
Token contracts for internal runtime trust and delegation.
Structs§
- Command
Token Factory - Factory de tokens bearer do runtime.
- Command
Token Validator - Validador de tokens bearer do runtime.
- Request
Validation Details - Details of an incoming query or command request used to verify its integrity.
- Request
Validation Details Ref - Borrowed request details that avoid copying an in-flight payload.
- Runtime
Token Claims - Bearer claims contract for
/commandauthentication (v1). - Token
Claims - Minimal token claims contract for internal token exchange.
Enums§
- Command
Token Error - Command-token specific validation/generation errors.
- Request
Payload Ref - Borrowed canonical payload used during request-bound token verification.
- Security
Error - Security-local errors.
Constants§
- DEFAULT_
RUNTIME_ TOKEN_ TTL_ MS - Default lifetime for locally issued Runtime tokens.
- LOCAL_
ADMIN_ SUBJECT - Explicit subject required for wildcard local-administration scope.
- MAX_
RUNTIME_ TOKEN_ BYTES - Maximum V1 envelope size: prefix, separator and two hex-encoded components.
- MAX_
RUNTIME_ TOKEN_ PAYLOAD_ BYTES - Maximum decoded JSON claims size (64 KiB), including JSON escaping.
- MAX_
RUNTIME_ TOKEN_ SIGNATURE_ BYTES - Maximum provider signature size (256 KiB), including embedded payloads.
Traits§
- Token
Provider - Contrato de assinatura e validação de payloads.
Functions§
- compute_
borrowed_ request_ hash - Computes the same deterministic V2 hash without materializing borrowed JSON.
- compute_
request_ hash - Computes the deterministic V2 SHA-256 hash of a canonically framed request.
Type Aliases§
- Security
Result - Security-local result type.