tokenrequestspec-authentication-v1.json

{
  "description": "TokenRequestSpec contains client provided parameters of a token request.",
  "properties": {
    "audiences": {
      "description": "Audiences are the intendend audiences of the token. A recipient of a token must identitfy themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.",
      "items": {
        "type": [
          "string",
          "null"
        ]
      },
      "type": [
        "array",
        "null"
      ]
    },
    "boundObjectRef": {
      "description": "BoundObjectReference is a reference to an object that a token is bound to.",
      "properties": {
        "apiVersion": {
          "description": "API version of the referent.",
          "type": [
            "string",
            "null"
          ]
        },
        "kind": {
          "description": "Kind of the referent. Valid kinds are 'Pod' and 'Secret'.",
          "type": [
            "string",
            "null"
          ]
        },
        "name": {
          "description": "Name of the referent.",
          "type": [
            "string",
            "null"
          ]
        },
        "uid": {
          "description": "UID of the referent.",
          "type": [
            "string",
            "null"
          ]
        }
      },
      "type": [
        "object",
        "null"
      ]
    },
    "expirationSeconds": {
      "description": "ExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.",
      "format": "int64",
      "type": [
        "integer",
        "null"
      ]
    }
  },
  "required": [
    "audiences"
  ],
  "type": "object",
  "$schema": "http://json-schema.org/schema#"
}