CONCEPT Cited by 1 source

Token-scoped access

Credential design where each token is scoped to a specific set of operations (e.g., publish-only, subscribe-only, or both) on a single resource, with independent expiration and independent revocation. Revoking one token does not disrupt other clients.

In the MoQ relay context, this prevents a viewer's subscribe-only credentials from being used to hijack a broadcaster's tracks — the credential's operation scope is the enforcement layer.

Properties

• Least privilege — each client receives only the permissions it needs.
• Independent lifecycle — tokens can be created, expired, or revoked individually.
• Resource-scoped — each token is bound to a single relay (in MoQ's current model).
• URL-embedded — token travels in the URL path and is checked at session open.

Seen in

• sources/2026-07-31-cloudflare-an-api-for-moq-provision-your-own-isolated-relays — MoQ relay tokens: "Each token is scoped to the operations a client needs, can be given an expiration, and can be revoked on its own"