permission

type Token struct {

	// BookingID represents the booking id/name that the token has been generated
	// for, so that connections can be dropped / denied if a booked session
	// is cancelled
	BookingID string `json:"booking_id"`

	// Topic identifies the communication channel;
	// think of it as a session_id, or room (webrtc)
	// Don't reuse standard claim Subject as that is for a
	// usually for a user and is reserved for later usage.
	Topic string `json:"topic"`

	// Determines the type of communication channel
	// and hence required scopes + hub/client implementation
	// e.g. "session" or "shell"
	ConnectionType string `json:"prefix"`

	// Scopes controlling access to relay;
	// either ["read"],["write"], or ["read","write"] for session, or ["host"]/["client"] for shell
	Scopes []string `json:"scopes"`

	jwt.RegisteredClaims `yaml:",omitempty"`
}