com.atproto.server.getServiceAuth

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Get a signed token on behalf of the requesting DID for the requested service.",
      "errors": [
        {
          "description": "Indicates that the requested expiration date is not a valid. May be in the past or may be reliant on the requested scopes.",
          "name": "BadExpiration"
        }
      ],
      "output": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "token": {
              "type": "string"
            }
          },
          "required": [
            "token"
          ],
          "type": "object"
        }
      },
      "parameters": {
        "properties": {
          "aud": {
            "description": "The DID of the service that the token will be used to authenticate with",
            "format": "did",
            "type": "string"
          },
          "aud_svc": {
            "description": "The id of the service endpoint under the 'aud' DID to authenticate with. In other words, the part after '#' in the DID document service endpoint 'id'. For sessions constrained to specific 'rpc' permissions, this field is required to match the name part of the 'aud' field on the permission.",
            "type": "string"
          },
          "exp": {
            "description": "The time in Unix Epoch seconds that the JWT expires. Defaults to 60 seconds in the future. The service may enforce certain time bounds on tokens depending on the requested scope.",
            "type": "integer"
          },
          "lxm": {
            "description": "Lexicon (XRPC) method to bind the requested token to",
            "format": "nsid",
            "type": "string"
          }
        },
        "required": [
          "aud"
        ],
        "type": "params"
      },
      "type": "query"
    }
  },
  "id": "com.atproto.server.getServiceAuth",
  "lexicon": 1
}