2e2c31d237
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
16 lines
432 B
HCL
16 lines
432 B
HCL
# Exact-path JWT delivery; no issuer password or sibling paths.
|
|
path "platform/data/workloads/net-kingdom/keycape-factor-read" {
|
|
capabilities = ["read"]
|
|
}
|
|
path "platform/metadata/workloads/net-kingdom/keycape-factor-read" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
# ESO validates its own short-lived workload session.
|
|
path "auth/token/lookup-self" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
path "auth/token/revoke-self" {
|
|
capabilities = ["update"]
|
|
}
|