RptPermission
in package
FinalYes
One entry of an RPT's `permissions` claim (CONTRACT.md §20.1).
A record of a decision already made, not a live authorization answer (§20.2 rule 7). These are the pairs the engine allowed when the RPT was minted; a grant revoked afterwards does not empty a live RPT. Do not cache them beyond the token's own expiry — which is why that expiry is short.
Table of Contents
Properties
- $exp : int
- $resourceId : string
- $resourceScopes : array<string|int, mixed>
Methods
- __construct() : mixed
Properties
$exp read-only
public
int
$exp
$resourceId read-only
public
string
$resourceId
$resourceScopes read-only
public
array<string|int, mixed>
$resourceScopes
Methods
__construct()
public
__construct(string $resourceId, array<int, string> $resourceScopes, int $exp) : mixed
Parameters
- $resourceId : string
-
The resource the engine allowed.
- $resourceScopes : array<int, string>
-
The scopes it allowed on that resource.
- $exp : int
-
Absolute expiry, seconds since the epoch.