token: Update comments to reflect actual implementation

This commit is contained in:
Zhaofeng Li 2023-01-08 00:57:22 -07:00
parent 5657e88cc0
commit 1c2173caac

View file

@ -1,11 +1,11 @@
//! Access control. //! Access control.
//! //!
//! Access control in Attic is simple and stateless [0] - The server validates //! Access control in Attic is simple and stateless [0] - The server validates
//! the JWT against a trusted public key and allows access based on the //! the JWT against a HS256 key and allows access based on the `https://jwt.attic.rs/v1`
//! `x-attic-access` claim. //! claim.
//! //!
//! One primary goal of the Attic Server is easy scalability. It's designed //! One primary goal of the Attic Server is easy scalability. It's designed
//! to be deployed to serverless platforms like AWS Lambda and have fast //! to be deployed to serverless platforms like fly.io and have fast
//! cold-start times. Instances are created and destoyed rapidly in response //! cold-start times. Instances are created and destoyed rapidly in response
//! to requests. //! to requests.
//! //!