For reading and verification only. You may not copy, use, modify or redistribute this code. Full notice on the main page.
contracts/schemas/proof-claims.schema.json
| 1 | { |
| 2 | "$schema": "https://json-schema.org/draft/2020-12/schema", |
| 3 | "$id": "https://all-mcp.fyi/contracts/v2/proof-claims.schema.json", |
| 4 | "title": "Claims of the DPoP proof (header typ dpop+jwt carrying the device's public jwk) the device sends in PROOF and again, with a fresh nonce, after RENEW. htm is GET, htu is https://<node host>[:port if not 443]/all-tunnel/2, ath is base64url(SHA-256(session token)), nonce is the node's CHALLENGE. Unknown extra claims are ignored (a token is not a closed shape), the listed ones are not optional unless the schema says so.", |
| 5 | "type": "object", |
| 6 | "required": ["sub", "aud", "htm", "htu", "iat", "jti", "ath", "nonce"], |
| 7 | "properties": { |
| 8 | "sub": {"$ref": "common.schema.json#/$defs/device_id"}, |
| 9 | "aud": {"const": "all-tunnel"}, |
| 10 | "htm": {"const": "GET"}, |
| 11 | "htu": {"type": "string", "maxLength": 300, "pattern": "^https://[a-z0-9.-]{1,253}(?::[0-9]{1,5})?/all-tunnel/2$"}, |
| 12 | "iat": {"$ref": "common.schema.json#/$defs/epoch_s"}, |
| 13 | "jti": {"$ref": "common.schema.json#/$defs/jti"}, |
| 14 | "ath": {"$ref": "common.schema.json#/$defs/sha256_b64url"}, |
| 15 | "nonce": {"$ref": "common.schema.json#/$defs/nonce"} |
| 16 | } |
| 17 | } |