Expand description
What the control plane tells an agent about the caller it forwards.
The control plane authenticates and authorizes every call, then forwards
it with an Assertion of who the caller is, in Authorization: IsbAssert <base64url JSON>. The agent believes it only because the
connection is mutual TLS with the control plane’s client certificate;
it still runs its own authorizer over it (org scope, role, token scopes),
so a forwarded call for org X cannot reach org Y.
Structs§
- Assertion
- A caller, as the control plane vouches for it.
Constants§
- SCHEME
- The
Authorizationscheme of a forwarded call.