Appearance
info/auth.proto
Table of Contents
info/auth.proto
Account
Represents an account which has access to this system
Field | Type | Label | Description |
---|---|---|---|
name | string | The account identifier | |
title | string | A descriptive name for this account | |
token | Token | The current token for this account | |
permissions | Permission | repeated | The set of permissions granted to the token bearer |
AddAccountRequest
Field | Type | Label | Description |
---|---|---|---|
name | string | ||
title | string | ||
permissions | Permission | repeated |
AddAccountResponse
Field | Type | Label | Description |
---|---|---|---|
account | Account |
GenerateTokenRequest
Field | Type | Label | Description |
---|---|---|---|
account_name | string |
GenerateTokenResponse
Field | Type | Label | Description |
---|---|---|---|
token | Token |
Permission
Describes a permission level for a particular device-trait
Field | Type | Label | Description |
---|---|---|---|
device_name | string | The fully qualified name of the device this permission represents, or '*' for all devices | |
trait_name | string | The fully qualified name of the trait on the specified device this permission represents (in package.Service format), or '*' for all traits | |
read | bool | Whether to allow read calls for this device-trait | |
write | bool | Whether to allow write calls for this device-trait | |
observe | bool | Whether to allow observe calls (i.e. Pull requests) for this device-trait |
RemoveAccountRequest
Field | Type | Label | Description |
---|---|---|---|
name | string |
RemoveAccountResponse
Token
Represents a token that can be granted against an Account for
Field | Type | Label | Description |
---|---|---|---|
id | string | The token ID string | |
expires_at | google.protobuf.Timestamp | A time the token expires |
UpdateAccountPermissionsRequest
Field | Type | Label | Description |
---|---|---|---|
change_type | smartcore.types.ChangeType | ||
permissions | Permission | repeated |
UpdateAccountPermissionsResponse
AuthProvider
The auth provider service enables granular control of security permissions for a particular Smart Core controller or system. It does this using the concept of 'Accounts', each of which has a certain set of permissions for which device(s) and/or trait(s)/service(s) they are allowed to access.
Method Name | Request Type | Response Type | Description |
---|---|---|---|
AddAccount | AddAccountRequest | AddAccountResponse | |
RemoveAccount | RemoveAccountRequest | RemoveAccountResponse | |
UpdateAccountPermissions | UpdateAccountPermissionsRequest | UpdateAccountPermissionsResponse | |
GenerateToken | GenerateTokenRequest | GenerateTokenResponse |