Bind a worker's name and labels into its token; list and revoke tokens by jti

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013GAeg4Jo6xjZzjwy9QDWMQ
2026-10-07 08:42:14 +02:00
parent 71b0f986e9
commit 21537e2eb6
16 changed files with 470 additions and 38 deletions
@@ -252,9 +252,12 @@ On the engine, mint a token:

 ```sh
 curl -X POST https://api.${DOMAIN}/api/v1/workers/tokens \
-  -H "Authorization: Bearer $TOKEN" -d '{"name": "shed-pi"}'
+  -H "Authorization: Bearer $TOKEN" -d '{"name": "shed-pi", "labels": ["shed", "gpio"]}'
 ```

+The labels are signed into it, so the worker can repeat them with `--labels`
+but not change them.
+
 On the other machine:

 ```sh