This approach would simplify zcap requirements and follow invocationTarget attenuation conventions better. IOW, a zcap could be delegated with an invocationTarget of https://example.com/edvs/123/documents -- and it could be used to query at https://example.com/edvs/123/documents? instead of creating custom rules to allow it to query at https://example.com/edvs/123/query.
This approach would simplify zcap requirements and follow
invocationTarget
attenuation conventions better. IOW, a zcap could be delegated with aninvocationTarget
ofhttps://example.com/edvs/123/documents
-- and it could be used to query athttps://example.com/edvs/123/documents?
instead of creating custom rules to allow it to query athttps://example.com/edvs/123/query
.