Skip to content

Rename SessionIdentity to ActorIdentity and reconsider JWT claims #575

Description

Today the ate-apiserver exposes a token broker API named SessionIdentity. The name predates the concept of Actor, but we never renamed it. Taahir Ahmed (@ahmedtd) proposed we rename it to ActorIdentity.

Additionally, the endpoint encodes actor specific information in JWS claims and SPIFFE URIs. This is the tuple appid, userid, sessionid. These are not concepts in substrate, we should probably use actor atespace, actor name, actor uid.

Metadata

Metadata

Labels

area/identitykind/cleanupSmall fixes that are not bugs, for example a typo in a code comment

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions