ReaderGrant

Kind: Type

Source: atloria-monorepo/apps/api/src/reader-access/reader-claims.ts

A3 grant strings recorded in grants[] — how the reader got in. The A3 access seam checks these against the project's current ProjectAccessPolicy.mode.

• password — entered the shared password
• link:<linkId> — redeemed an owner share link (universal — bypasses any mode)
• email:<domain> — verified a 6-digit code for an allow-listed domain
• sso:<subject> — authenticated via the org IdP in reader mode
• member:<userId> — org staff (informational; member bypass is checked via the member JWT, not this grant)

Definition

ts
string