When using for cold storage or Federated repository we perform the Deployment Bindings, which allows trust to be bi-directional. Which will have the binding tokens which enable admins to create trust between managed JFrog Platform Deployments (JPDs) once the JPDs have been added. For more information on the Bindings refer to this Article.
When adding a binding, we issue an artifactory/api/v1/service_trust/exchange request to the target JPD and based on the binding type, either Federated repo or cold instance, the scope will be generated using Artifactory service id.
For Example:
jfrt@01h5kc76gh31ak018reyt40mwa:admin internal:federated-repo/*
internal:service-trust/pairing/federated-repo/*:x
This information will be updated in the artifactory.config.latest.xml file under the authentication token snippet.
Example:
This information will be helpful to validate in case there is any issue with the token verification failed (Token failed verification: signature) or misconfiguration with the JPD’s deployments and Bindings.