Delegated bridge

[ramondeklein]

It should be possible to generate a delegate token to request a bridge. A trusted party -with access to the API key- can request a delegate token for a specific device (optionally with fixed request data). The delegate token has an expiration date and can be used by an untrusted party to setup that specific bridge without access to the API key.

This is useful for scenarios where another service authorizes whether a bridge to a device is allowed. That authoring service checks if the bridge is allowed and requests a delegate token. The delegate token is then returned to the service and/or application that wants to initiate the bridge.

[ramondeklein]

Delegated bridge is implemented and can be used with /bridge/getSignedUrl and /bridge/connectSigned.