Actions
이슈 #460
진행중
HP
JL
이슈 #457: Stronger capability APIs — design spike (ADR-0010)
Stronger capability APIs — MR C: delegation (ADR-0013)
이슈 #460:
Stronger capability APIs — MR C: delegation (ADR-0013)
설명
ADR-0010 MR C (마지막 슬라이스). capability session 간 delegation: issuer cap_session이 delegatee cap_session에게 attenuated scope 부여.
작업¶
- capability_delegations 테이블 (migration v25): issuer/delegatee session(FK), issuer ns/app, scope_read/write(JSONB), status, expiry
- store: Insert(INSERT...SELECT: issuer ns/app 도출 + 양쪽 세션 active 필수), GetActive(delegation+issuer+delegatee 모두 active = cascade), Get, Revoke
- handler: scopeSubset(attenuation, prefix-glob), CreateDelegation(issuer manifest effective scope에 subset 검증), AuthorizeDelegatedAccess(both active + caller-bound delegatee + scope + manifest drift 재검증 → resolved target)
- verified cap_session 기반으로만 생성/사용, raw ambient app identity 아님
- ADR-0013 (Accepted), ADR-0010 → Accepted (3개 슬라이스 모두 landed)
관련¶
- parent #457, follows #458(MR A), #459(MR B)
- 후속: cross-app fs route / signing-payment provider
- 코드/리뷰는 GitLab MR, 본 이슈는 링크/상태만 유지
Actions