Add some guidelines about delegation

This commit is contained in:
Jon Staab 2025-02-19 11:00:10 -08:00
parent 15a18367ec
commit f1feddac4c

2
46.md
View File

@ -115,6 +115,8 @@ Each of the following are methods that the _client_ sends to the _remote-signer_
The `delegate` method MUST provide a comma-separated list of allowed permissions and return a bunker url representing a fresh session. The bunker MUST NOT allow this session to request additional permissions, returning an error message for any requests that are not allowed by the initial `perms` string. The `delegate` method MUST provide a comma-separated list of allowed permissions and return a bunker url representing a fresh session. The bunker MUST NOT allow this session to request additional permissions, returning an error message for any requests that are not allowed by the initial `perms` string.
Signers MUST revoke delegated sessions when the parent session is invalidated. Signers MUST NOT allow delegated sessions to create nested delegated sessions.
## Response Events `kind:24133` ## Response Events `kind:24133`
```json ```json