diff options
| author | Anders Betts <anders.betts@gmail.com> | 2026-09-17 21:48:00 +0200 |
|---|---|---|
| committer | Anders Betts <anders.betts@gmail.com> | 2026-09-17 21:48:00 +0200 |
| commit | 071b7e9b01e41d4048b1bbb3d9caaac4c8a526de (patch) | |
| tree | b0af0a71e0d9fff2ca166d6ca69167ff32cc2ccb /docs/PROTOCOL.md | |
| parent | a145684f0a556820a183db45d27e9b2dc715f056 (diff) | |
| download | bokf-071b7e9b01e41d4048b1bbb3d9caaac4c8a526de.tar.gz bokf-071b7e9b01e41d4048b1bbb3d9caaac4c8a526de.zip | |
Add token login to bokfctl and enforce admin scope for tokensv0.1.3
- bokfctl: --token / BOKFD_TOKEN via client_token_login
- tokens must carry the admin scope for admin commands (was bypassed)
- docs: token-based snapshot for restic backups
Diffstat (limited to 'docs/PROTOCOL.md')
| -rw-r--r-- | docs/PROTOCOL.md | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/docs/PROTOCOL.md b/docs/PROTOCOL.md index e9c4331..25c9250 100644 --- a/docs/PROTOCOL.md +++ b/docs/PROTOCOL.md @@ -95,7 +95,9 @@ and returns an opaque, high-entropy session id: - A token is bound to one user and one org, has scopes (`read`, `write`, `admin`) and is an independent audit actor (label shown in history). - Tokens are the intended mechanism for agents and for accountant/viewer - access. They can be revoked immediately (`token.revoke`). + access. They can be revoked immediately (`token.revoke`). Scopes are + enforced for every command, including admin commands: `backup.snapshot` + and `user.*` need a token with the `admin` scope. ### 4.3 Roles and permissions |