Website Permissions

TLDR: walkthrough from both consumer & integrator/provider perspective of design where accounts are registeres with specific actions that can be authenticated coming from the account. thinking jwt + passkey