Mint a narrowed (method-scoped) api token through the production
account_token_create path, for suites that probe what a narrowed token is
refused.
Minted rather than seeded: the token comes out of the same handler a real minter uses, on whichever account owns the session the caller passes — so a suite can put a narrowed token on an account that lacks a gating role, and the mint itself asserts that a narrowed scope is accepted at the mint boundary, not merely stored.
2 declarations
testing/cross_backend/narrowed_api_token.ts view source
(options: MintNarrowedApiTokenOptions): Promise<string> import {mint_narrowed_api_token} from '@fuzdev/fuz_app/testing/cross_backend/narrowed_api_token.js'; Mint a narrowed api token and return its raw bearer value.
optionsPromise<string>
the raw token, for an Authorization: Bearer header
Error - when the mint is refused, naming the status and errortesting/cross_backend/narrowed_api_token.ts view source
MintNarrowedApiTokenOptions import type {MintNarrowedApiTokenOptions} from '@fuzdev/fuz_app/testing/cross_backend/narrowed_api_token.js'; Options for mint_narrowed_api_token.
appTransport the mint goes over — it must carry an allowed Origin (the default rpc_call one does).
type RpcCallApp
rpc_pathRPC endpoint path account_token_create is mounted on.
type string
session_headersSession credential headers of the account that owns the token — the mint is session-only.
type Record<string, string>
methodsThe RPC methods the token admits; every other method and every non-RPC surface refuses it.
type readonly string[]
name?Token label. Default 'narrowed test token'.
type string