Decides whether principal may address the session described by subject.
principal
subject
Fails closed: anything that cannot be positively matched is refused.
owner + scope of the session
the authenticated caller (from the server-built UserInfo, never from client args)
UserInfo
Decides whether
principalmay address the session described bysubject.Fails closed: anything that cannot be positively matched is refused.