generated from coulomb/repo-seed
34 lines
828 B
YAML
34 lines
828 B
YAML
# Claim envelope a key-cape (lightweight mode) deployment emits for an
|
|
# authenticated human user. Profile-conformant minimum: required claims
|
|
# only, single audience, simple roles list, OIDC standard amr values.
|
|
#
|
|
# Reference: docs/iam-profile-consumption.md, NetKingdom IAM Profile v0.2
|
|
# "Core Claims" and "Local Development Profile".
|
|
|
|
iss: https://idp.netkingdom.local/keycape
|
|
sub: user-7f9e2b
|
|
aud:
|
|
- flex-auth
|
|
exp: 4102444800 # 2100-01-01, kept far-future for stable fixtures
|
|
iat: 1767225600 # 2026-01-01
|
|
tenant: tenant:platform
|
|
principal_type: human
|
|
preferred_username: ada
|
|
email: ada@netkingdom.local
|
|
name: Ada Lovelace
|
|
scope: openid profile hub:read
|
|
roles:
|
|
- viewer
|
|
amr:
|
|
- pwd
|
|
acr: "1"
|
|
groups:
|
|
- /markitect/readers
|
|
assurance:
|
|
level: aal1
|
|
methods:
|
|
- pwd
|
|
mfa: false
|
|
source: key-cape
|
|
at: 1767225600
|