jwt

SKILL.md

Sorcha uses JWT Bearer authentication with the Tenant Service as the token issuer. All services validate tokens using shared JwtSettings from Sorcha.ServiceDefaults. Tokens support three types: user (email/password), service (client credentials), and delegated (service acting on behalf of user).

| Token Types | Differentiate user vs service | tokentype claim: "user" or "service" | | Organization Scope | Isolate tenant data | orgid claim in token | | Signing Key | Symmetric HMAC-SHA256 | Auto-generated in dev, Azure Key Vault in prod | | Token Lifetime | Configurable per type | Access: 60min, Refresh: 24hr, Service: 8hr |

為服務到服務和用戶授權實現 JWT 承載身份驗證。 使用場合：配置身份驗證、創建授權策略、頒發/驗證令牌或排除 401/403 錯誤。 來源：stuartf303/sorcha。

開啟你的終端機或命令列工具（如 Terminal、iTerm、Windows Terminal 等） 複製並執行以下指令：npx skills add https://github.com/stuartf303/sorcha --skill jwt 安裝完成後，技能將自動設定到你的 AI 程式設計環境中，可以在 Claude Code 或 Cursor 中使用

查看原文