attestation
attestation copied to clipboard
Capability attestation
trafficstars
Per request from @colourful-land we need to construct a new object called Capability Attestation, which can be used by Token Negotiator to preemptively fetch a token for a specific site. We agreed that such an attestation would include the following fields:
- Unique ID (big Integer)
- Domain (URL)
- notBefore (Unix time)
- notAfter (Unix time
- Capabilities (Integer or bit string. In the integer case each bit of the integer will represent a capability granted if the bit is 1)
@colourful-land can you give me a list of the initial capabilities you are thinking about? So far I am just adding, read, write and deletage.
@weiwu-zhang - can you please provide some feedback to Tore on this issue?