fn prove_account(
state: &AppState,
headers: &HeaderMap,
did: &str,
now: OffsetDateTime,
) -> Result<String, ApiError>Expand description
The account’s own JWT: a key proof whose iss is did, for this
server and this method, spent here. Answers the key that signed it.
A session and an ID token are refused before anything is fetched: a new key is a way to take sessions, and only a key the account holds may ask for one.