User Access Token

Questions
, ,
1

Based on the Audience-Based Tokens section in the documentation, wrt the following format:

{
   "aud": "https://daml.com/jwt/aud/participant/someParticipantId",
   "sub": "someUserId",
   "exp": 1300819380
}

I need to get my Java app request the above token from my IAM so that I may pass it on every request to the ledger. To do this, I need to know if the someParticipantId is the same as the PN namespace? Can I confirm that this changes only if the node is restarted?

2

To the best of my understanding, the participant ID does not change once the node is started. However, you might want to set a fixed participant ID so that you can rely on that. You might want to have a look at this thread.

1 Like
3

Thanks @stefanobaghino-da.

Is the participantId the same thing as the PN namespace?

4

Not really, I wholeheartedly recommend reading our docs with regards to identities in Canton, it’s quite complete and should give you a solid understanding: Identity Management — Daml SDK 2.5.3 documentation

1 Like