TokenIdentity
Defined in: src/http/introspect.ts:81
The identity an opaque credential authenticates as.
Properties
Section titled “Properties”principal
Section titled “principal”principal: string;Defined in: src/http/introspect.ts:85
The canonical principal. Return it in the exact form the worker itself would derive, so an asker that normalises differently does not authorize as one identity while the worker serves another.
tokenName?
Section titled “tokenName?”optional tokenName?: string;Defined in: src/http/introspect.ts:88
Human-readable name for the credential, for audit trails. Never the credential.
ttlSeconds?
Section titled “ttlSeconds?”optional ttlSeconds?: number;Defined in: src/http/introspect.ts:93
How long the answer may be cached. The caller does the caching; this endpoint holds none of its own. Treat it as an authorization window, because for any path the asker serves without re-presenting the credential it is exactly that.