-
Notifications
You must be signed in to change notification settings - Fork 137
Open
Labels
Description
Tapd generates default macaroons on first start and enforces per RPC entity:action permissions. Tapcli does not currently expose a bakemacaroon command like lncli, so users cannot mint scoped macaroons for tapd in standalone deployments.
Implement a macaroon bakery RPC in tapd and a tapcli bakemacaroon wrapper to allow users to mint macaroons with specific permissions. Match LND semantics but use Taproot Assets permission ops.
Copy patterns/naming conventions form lncli bakemacaroon where possible.
Also add an itest that bakes a restricted macaroon and verifies that:
- allowed RPCs succeed
- RPCs outside its scope fail.