OptionaldisplayHuman-readable display name.
OptionalavatarURL or data-URI of an avatar image.
OptionalallowedRestricts the set of audiences this SubHandle may create sessions for.
undefined = unrestricted; [] = deny all.
OptionalallowedRestricts the set of scopes this SubHandle may request in sessions.
undefined = unrestricted; [] = deny all.
OptionalmaxMaximum allowed TTL (in seconds) for sessions created by this SubHandle. Attempts to create a session with a larger TTL will be rejected.
OptionalexpiresUnix timestamp (in seconds) at which this SubHandle itself expires. After this time, any attempt to create a session will fail. Useful for temporary access grants (e.g., contractor access for 2 weeks).
Metadata for a SubHandle, extending HandleMetadata with constraints that govern session creation.
All constraint fields are optional. When present, they are enforced by SubHandle.validateSessionOptions at session creation time.