Expand description
Scoped delegation tokens for sub-agents.
v2.0: hard-break from v1 compact format. Tokens are now standard JWS
(RFC 7515) using EdDSA. Supports structured constraints, RFC 8693 act
chain, and algorithm agility via Algorithm.
Re-exports§
pub use crate::auth_keys::parse_alg;
Structs§
- ActClaim
- RFC 8693 nested act claim.
- Constraint
Set - Structured constraints — a tree of expressions evaluated against the request context. Replaces v1’s free-form constraint strings.
- Delegation
Claims - Standard JWS compact serialization:
base64url(header).base64url(payload).base64url(signature). - Delegation
Config - TTL configuration for minting tokens.
- Delegation
Signer - Signer that mints JWS tokens.
- Delegation
Spec - Input for minting a child delegation from a verified parent.
- Delegation
Token - A signed JWS token + its parsed claims.
- Delegation
Verifier - Verifies JWS tokens using a key registry of public keys.
- Verified
Delegation - A successfully verified delegation token.
Enums§
- Constraint
Expr - A single constraint expression over a context path.
Constants§
- MAX_
DELEGATION_ TOKEN_ BYTES - Maximum compact JWS size accepted by the delegation parser.
Traits§
- Delegation
Revocation Store - Durable revocation-state port for delegated grants.
Functions§
- glob_
match - Glob match with
*wildcard support.