Module credentials 

bot.did.updateCredentials: what logs in as an account, changed after it is created.

Two callers. The account replaces the key that signed the request with one new key, which signs addProof. The operator adds a credential, removes one, or both, on any account but the server’s own. Either way the change is one commit, made by Registry::update_credentials.

Structs

ChangeRequest 🔒

The change a body asks for. The dashboard’s route names the account in its path, so its body is this alone.

OwnedChange 🔒

A CredentialChange that can cross into a blocking task.

UpdateCredentialsRequest 🔒

Body of bot.did.updateCredentials.

Constants

METHOD 🔒

The method, as a key proof’s lxm names it.

Functions

add_proof_invalid 🔒

change_credentials 🔒

The change request asks of did, by the operator when by_operator.

check_add_proof 🔒

addProof: a JWT the added key signed as the account, for this server and this method, spent here.

parse_add 🔒

The request’s add, parkedKey and remove, checked for shape.

prove_account 🔒

The account’s own JWT: a key proof whose iss is did, for this server and this method, spent here. Answers the key that signed it.

require_replace 🔒

Refuses an account’s change that is not one key replacing the key that signed the request.

take_parked 🔒

The key parked under the account’s hostname with fingerprint, taken, for the account’s kind.

update_credentials 🔒

POST /xrpc/bot.did.updateCredentials

update_credentials_from_dashboard 🔒

POST /dashboard/api/accounts/{did}/credentials: the operator’s change, at a path the dashboard’s session cookie reaches. That cookie is scoped to /dashboard, so a browser never carries it to /xrpc.

update_credentials_inner 🔒