Expand description
Operator identity for self-managed tenants.
A self-managed tenant is not reachable through the systemprompt.io
control plane, so its operators sign in against an OIDC issuer the
tenant trusts (security.trusted_issuers on the tenant).
run_operator_login runs the browser authorization-code flow with PKCE
over the loopback callback and stores the issuer’s ID token as
OperatorCredentials; exchange_for_tenant trades it for a tenant
session through RFC 8693 token exchange at the tenant’s own token endpoint.
The ID token’s signature is verified by the tenant during that exchange, not
here.
Copyright (c) systemprompt.io — Business Source License 1.1. See https://systemprompt.io for licensing details.