Skip to content

Rename SessionIdentity to ActorIdentity and reconsider JWT claims #575

New issue
New issue
Closed
Task
#670
#602
Closed
Rename SessionIdentity to ActorIdentity and reconsider JWT claims#575
Task
#670
#602
Assignees
ahmedtd
Labels
area/identitykind/cleanupSmall fixes that are not bugs, for example a typo in a code comment
Milestone
M2

Description

@juli4n
Julian Gutierrez Oschmann (juli4n)
opened on Jul 28, 2026

Today the ate-apiserver exposes a token broker API named SessionIdentity. The name predates the concept of Actor, but we never renamed it. Taahir Ahmed (@ahmedtd) proposed we rename it to ActorIdentity.

Additionally, the endpoint encodes actor specific information in JWS claims and SPIFFE URIs. This is the tuple appid, userid, sessionid. These are not concepts in substrate, we should probably use actor atespace, actor name, actor uid.

Activity

  1. Julian Gutierrez Oschmann (juli4n)
    added
    kind/cleanupSmall fixes that are not bugs, for example a typo in a code comment
    on Jul 28, 2026
  2. Julian Gutierrez Oschmann (juli4n)
    added the
    Task
    issue type on Jul 28, 2026
  3. Julian Gutierrez Oschmann (juli4n)
    added
    area/identity
    on Jul 28, 2026
  4. Julian Gutierrez Oschmann (juli4n)
    added this to the M2 milestone on Jul 28, 2026
  5. Julian Gutierrez Oschmann (juli4n)
    assigned
    Taahir Ahmed (ahmedtd)
    on Jul 28, 2026
  6. Bowei Du (bowei)
    closed this as completedin #602on Jul 30, 2026

  7. LiorLieberman commented on Jul 30, 2026

    @LiorLieberman
    Lior Lieberman (LiorLieberman)
    on Jul 30, 2026
    Collaborator

    Additionally, the endpoint encodes actor specific information in JWS claims and SPIFFE URIs. This is the tuple appid, userid, sessionid. These are not concepts in substrate, we should probably use actor atespace, actor name, actor uid.

    This part of the issue is still not complete, so re-opening,

  8. Lior Lieberman (LiorLieberman)
    reopened this on Jul 30, 2026
  9. Zheng Lammerts (zlammerts-svg)
    added this to Substrate Milestones (go/substrate-milestones)on Jul 31, 2026
  10. github-project-automation
    moved this to Todo in Substrate Milestones (go/substrate-milestones)on Jul 31, 2026
  11. github-project-automation
    moved this from Todo to In Progress in Substrate Milestones (go/substrate-milestones)on Jul 31, 2026
  12. Dmitry Berkovich (dberkov)
    closed this as completedin #670on Aug 2, 2026
  13. github-project-automation
    moved this from In Progress to Done in Substrate Milestones (go/substrate-milestones)on Aug 2, 2026
  14. Dmitry Berkovich (dberkov)
    added a commit that references this issue on Aug 2, 2026

    ActorIdentity: protos, cert issuance, actorIdentity x509 extension (a…

    0909650
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

area/identitykind/cleanupSmall fixes that are not bugs, for example a typo in a code comment

Type

Task

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions