When a trusted caller (Bascule SA) sets on_behalf_of in the authorize request, the AC principal is the specified operator DID instead of the SA's JWT identity. Display name extracted from last DID segment. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| chronicle | ||
| connectors | ||
| drivers | ||
| functions | ||
| models | ||
| routers | ||
| __init__.py | ||
| app.py | ||
| db.py | ||
| db_models.py | ||
| settings.py | ||