| Index: mojo/services/vanadium/security/public/interfaces/principal.mojom
|
| diff --git a/mojo/services/vanadium/security/public/interfaces/principal.mojom b/mojo/services/vanadium/security/public/interfaces/principal.mojom
|
| deleted file mode 100644
|
| index 9c58834801e7adac99767c3dc0a137cc84896112..0000000000000000000000000000000000000000
|
| --- a/mojo/services/vanadium/security/public/interfaces/principal.mojom
|
| +++ /dev/null
|
| @@ -1,49 +0,0 @@
|
| -// Copyright 2015 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -module vanadium;
|
| -
|
| -// Represents the name of an application. |url| is the url of the
|
| -// application. |qualifier| is a string that allows to tie a specific
|
| -// instance of an application to another.
|
| -struct AppInstanceName {
|
| - string url;
|
| - string? qualifier;
|
| -};
|
| -
|
| -// Certificate represents a human-readable name and public-key (DER encoded) pair.
|
| -// The private-key for a certificate is only available for signing operations
|
| -// within the principal service application.
|
| -struct Certificate {
|
| - string extension;
|
| - array<uint8>? publickey;
|
| -};
|
| -
|
| -// Blessing is a credential binding a user identity to a public key. The corresponding
|
| -// private key is only available for signing within the PrincipalService application.
|
| -struct Blessing {
|
| - array<Certificate> chain;
|
| -};
|
| -
|
| -// ChainSeparator is the separator used to join name extensions in a certificate chain.
|
| -const string ChainSeparator = "/";
|
| -
|
| -// A service that binds user identities to an application instance running in Mojo
|
| -interface PrincipalService {
|
| - // Login is called by an application instance (requestor_url/qualifier) that
|
| - // wants to get a user blessing. The service may obtain the user blessing
|
| - // through a third-party authentication flow (eg:oauth2). The user blessing
|
| - // is bound to a public/private key-pair that this service generates and
|
| - // persists for this application instance. Returns null if login fails.
|
| - Login() => (Blessing? user_blessing);
|
| -
|
| - // Removes the user blessing for the application instance that invokes the
|
| - // Logout method.
|
| - Logout();
|
| -
|
| - // GetUserBlessing returns the user blessing for a given application instance.
|
| - // It returns an error if the application instance has not invoked Login().
|
| - GetUserBlessing(AppInstanceName app) => (Blessing? user_blessing);
|
| -};
|
| -
|
|
|