Both of these params should not be passed at the same time. If capability is passed and the caller wants to attenuate the invocationTarget, they are supposed to pass that param. This API could be improved; I wonder if the url param should be removed and only invocationTarget should be used instead -- as it would work fine if no capability were passed, generating a root zcap URN in that case (just like if you only pass url).
dlongley
commented
2 years ago
Both of these params should not be passed at the same time. If
capabilityis passed and the caller wants to attenuate theinvocationTarget, they are supposed to pass that param. This API could be improved; I wonder if theurlparam should be removed and onlyinvocationTargetshould be used instead -- as it would work fine if nocapabilitywere passed, generating a root zcap URN in that case (just like if you only passurl).