---

Class ::nsmcp::BearerAuthenticator

::nsmcp::BearerAuthenticator create ... \
           [ -store:required store:required ]

Only the table name enters the blueprint. Credential records live in nsv.

Defined in /usr/local/ns/tcl/nsmcp/lib/security.tcl

Class Relations

• class: ::nx::Class
• superclass: ::nsmcp::Authenticator

Methods (to be applied on instances)

• authenticate (scripted, public)

   <instance of nsmcp::BearerAuthenticator> authenticate \
      authorization server

  Parameters:

  authorization (required)

  server (required)

  Testcases:

  No testcase defined.

• credentialInfo (scripted, public)

   <instance of nsmcp::BearerAuthenticator> credentialInfo digest

  Parameters:

  digest (required)

  Testcases:

  No testcase defined.

• grant (scripted, public)

   <instance of nsmcp::BearerAuthenticator> grant token principal \
      permissions targets expires

  Parameters:

  token (required)

  principal (required)

  permissions (required)

  targets (required)

  expires (required)

  Testcases:

  No testcase defined.

• issue (scripted, public)

   <instance of nsmcp::BearerAuthenticator> issue principal \
      permissions targets expires

  Explicit administrative operation; never called automatically at init. Return the secret once, without logging it or storing it in nsv.

  Parameters:

  principal (required)

  permissions (required)

  targets (required)

  expires (required)

  Testcases:

  No testcase defined.

• revoke (scripted, public)

   <instance of nsmcp::BearerAuthenticator> revoke digest

  Parameters:

  digest (required)

  Testcases:

  No testcase defined.

---