Bind a worker's name and labels into its token; list and revoke tokens by jti

2026-10-07 08:42:14 +02:00
parent 9ef7f90dd8
commit 953a983919
16 changed files with 470 additions and 38 deletions
@@ -252,9 +252,12 @@ On the engine, mint a token:

 ```sh
 curl -X POST https://api.${DOMAIN}/api/v1/workers/tokens \
-  -H "Authorization: Bearer $TOKEN" -d '{"name": "shed-pi"}'
+  -H "Authorization: Bearer $TOKEN" -d '{"name": "shed-pi", "labels": ["shed", "gpio"]}'
 ```

+The labels are signed into it, so the worker can repeat them with `--labels`
+but not change them.
+
 On the other machine:

 ```sh