jwt

SKILL.md

Sorcha uses JWT Bearer authentication with the Tenant Service as the token issuer. All services validate tokens using shared JwtSettings from Sorcha.ServiceDefaults. Tokens support three types: user (email/password), service (client credentials), and delegated (service acting on behalf of user).

| Token Types | Differentiate user vs service | tokentype claim: "user" or "service" | | Organization Scope | Isolate tenant data | orgid claim in token | | Signing Key | Symmetric HMAC-SHA256 | Auto-generated in dev, Azure Key Vault in prod | | Token Lifetime | Configurable per type | Access: 60min, Refresh: 24hr, Service: 8hr |

为服务到服务和用户授权实现 JWT 承载身份验证。 使用场合：配置身份验证、创建授权策略、颁发/验证令牌或排除 401/403 错误。 来源：stuartf303/sorcha。

打开你的终端或命令行工具（如 Terminal、iTerm、Windows Terminal 等） 复制并运行以下命令：npx skills add https://github.com/stuartf303/sorcha --skill jwt 安装完成后，技能将自动配置到你的 AI 编程环境中，可以在 Claude Code 或 Cursor 中使用

查看原文