diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/access.md | 6 | ||||
| -rw-r--r-- | docs/openapi.yaml | 2 |
2 files changed, 5 insertions, 3 deletions
diff --git a/docs/access.md b/docs/access.md index 1397656..571034e 100644 --- a/docs/access.md +++ b/docs/access.md @@ -177,8 +177,10 @@ forgets it. The login page token pasted, from a login by key, say; the dashboard renews it while open ([`dashboard.md`](dashboard.md)). -`GET /auth/whoami` says the swarm, who a request's user is, how it proved it, and what -it may do. +`GET /auth/whoami` says the swarm, who a request's user is, how it proved it, its +capabilities (`caps`), and what this request may do (`may`): those, or with a token +that says less (`limit`), what both give, each capability's path the deeper of the two +and its rights those both name. Pages of other origins, the dashboards of other members, may call a node with a token: its own links (`/admin/dashboard/links/own`, and its events) and messages diff --git a/docs/openapi.yaml b/docs/openapi.yaml index adee4a6..1b4a199 100644 --- a/docs/openapi.yaml +++ b/docs/openapi.yaml @@ -1031,7 +1031,7 @@ paths: get: tags: [Auth] summary: Who you are here - description: The swarm, the user, how it proved it (`htpasswd`, `header`, `token`), its registry entry's capabilities, and its token's claims if it came with one. + description: The swarm, the user, how it proved it (`htpasswd`, `header`, `token`), its registry entry's capabilities (`caps`), what this request may do (`may`, a list of capabilities; with a token that says less, what both give), and its token's claims if it came with one. responses: '200': description: Who. |