bluesky-social / atproto-website

https://atproto.com
Other
231 stars 141 forks source link

specs/xrpc: more JWT fields; document typ #347

Closed bnewbold closed 2 days ago

bnewbold commented 1 week ago

Pulls in the lxm and jti updates from: https://github.com/bluesky-social/atproto/discussions/2687

And the iat and jti fields, and typ values.

Please review the types (string/number/integer) and whether required or not. I'm not really sure how to specify the data type of, eg, iat: it is JSON so can't really say "integer", right? Just numeric? If these are floats, is it expected that they be validated with sub-second precision?

Trying to keep this PR tight/simple, so not reviewing/touching any "should" / "must" type language elsewhere in these sections.

Closes: https://github.com/bluesky-social/atproto-website/issues/327

cc: @rudyfraser doing PDS work and generating inter-service auth JWTs