Connectum API Reference / @connectum/auth / MeshIdentityEntry

Interface: MeshIdentityEntry

Defined in: packages/auth/src/types.ts:374

An allow-list entry for meshIdentityTrust, mapping a verified mesh identity (the forwarded peer principal) to its authorization context.

Properties

name?

readonly optional name?: string

Defined in: packages/auth/src/types.ts:385

Optional human-readable name for the calling service.

---

principal

readonly principal: string

Defined in: packages/auth/src/types.ts:379

The mesh-forwarded peer identity to match, e.g. an Istio short-form ServiceAccount principal cluster.local/ns/<ns>/sa/<name> or a SPIFFE id.

---

roles?

readonly optional roles?: readonly string[]

Defined in: packages/auth/src/types.ts:381

Roles granted to this caller (compose via requires {roles}).

---

scopes?

readonly optional scopes?: readonly string[]

Defined in: packages/auth/src/types.ts:383

Scopes granted to this caller (compose via requires {scopes}).