https://engine.speedle.io/tags/token-asserter/ Recent content in Token Asserter on Speedle Hugo -- gohugo.io en-us Mon, 21 Jan 2019 09:28:30 +0800 https://engine.speedle.io/docs/assertor/ Mon, 21 Jan 2019 09:28:30 +0800 https://engine.speedle.io/docs/assertor/ What does a token asserter do? A configured asserter validates a token and returns explicit principals, including their identity domains. Speedle can then evaluate policies using those identities. A production implementation must validate the token’s signature or introspection result, issuer, audience, expiry and any provider-specific requirements. The webhook alone does not establish compatibility with arbitrary OAuth/OIDC tokens. The Token Assertion Plugin API uses integer errCode and an optional attribute object, not a typed attribute array.