ErrorsSign-in and identity · rule
type.auth_credential_stored
Entity field holds an API token or a service key.
Area 8, Sign-in and identity; not declinable; the next step is usually the agent's.
An API token or a service key is shown once and kept only as its verifier, so no entity can keep one:
principal { user: { subject: Member.handle }}authentication { api_token: {}}type Handle = Text { max_length: 40}entity Member { id: Uuid handle: Handle { unique: true } last_token: ApiToken}
error Member.last_token keeps an API token
--> main.jadpo:20:17
|20 | last_token: ApiToken | ^^^^^^^^ a secret, stored
- reason
- An API token is shown once, in the output of the action that issues it, and the runtime keeps only its verifier, so a copy of the database signs no one in.
- next
- Remove
last_token, and give the token in the output of the action that issues it (agent) - rule
- type.
auth_ credential_ stored - help
- https://jadpo.
dev/docs/errors/type. auth_ credential_ stored
Markdown for agents: /docs/errors/type.auth_credential_stored.md.Built from Jadpo main at aee2e8f.