When a trusted caller (Bascule SA) sets on_behalf_of in the authorize request, the AC principal is the specified operator DID instead of the SA's JWT identity. Display name extracted from last DID segment. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| authorize.py | ||
| complete.py | ||
| connectors.py | ||
| drivers.py | ||
| elevate.py | ||
| functions.py | ||
| health.py | ||
| session.py | ||