account_auth_descriptor
An entity that allows fine-tuned access control over accounts. It's used to specify what keypairs can access an account, and it can limit the conditions for access in some ways.
entity account_auth_descriptor {a unique identifier for the auth descriptor
key id: byte_array;the account it allows access to
key account: account;whether it's single-sig or multi-sig. It will influence the args property.
auth_type: auth_type;It specifies signers and level of access for the auth descriptor. It should be either of the following structs, encoded into a byte array:
single_sig_args, ifauth_typeisSmulti_sig_args, ifauth_typeisM
args: byte_array;Must be one of these values, converted to gtv and then encoded into a byte array:
- no rules:
null(when encoded, it will be converted toGTV_NULL_BYTES) - a simple rule: a
rule_expression - a complex rule: a list starting with the value
"and"and followed byrule_expressions
The amount of rule expressions should always be less than or equal to
auth_descriptor_config.max_rules.
After the expiration conditions are reached, this auth descriptor will automatically be deleted as soon as the account that owns it sends an operation.
Must be GTV_NULL_BYTES if this is the main_auth_descriptor for the account.
See Also
- [
rule_expression] — explains what it means to expire
rules: byte_array;Used for the op_count expiration rule, counts how many operations this auth
descriptor has authenticated.
mutable ctr: integer;When was this auth descriptor registered
created: integer;}