search

sodazone / ocelloids-services

Ocelloids Service Layer
https://ocelloids.net
Apache License 2.0
9 stars 3 forks source link

Update authentication and authorization documentation #108

Closed mfornos closed 1 month ago

mfornos commented 2 months ago

OC_SECRET is no longer available and has been replaced by EdDSA signatures.

JWT tokens do not contain scopes or capabilities directly. Instead, they map to a subject, which identifies an account. This account holds relations to API token entities that have their scopes configured in the database.