No public description

willow/proto/willow/BUILD

@@ -21,6 +21,20 @@ package(
     default_visibility = ["//visibility:public"],
 )
 
+proto_library(
+    name = "auth_token_proto",
+    srcs = ["auth_token.proto"],
+    deps = [
+        "@protobuf//:timestamp_proto",
+
+    ],
+)
+
+cc_proto_library(
+    name = "auth_token_cc_proto",
+    deps = [":auth_token_proto"],
+)
+
 proto_library(
     name = "committee_selector_proto",
     srcs = ["committee_selector.proto"],

willow/proto/willow/auth_token.proto

@@ -0,0 +1,35 @@
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+edition = "2023";
+
+package secure_aggregation.willow;
+
+import "google/protobuf/timestamp.proto";
+
+option features.field_presence = IMPLICIT;
+option java_multiple_files = true;
+option java_package = "com.google.secureaggregation.willow";
+option java_outer_classname = "AuthToken";
+
+// The body of the token authorizing requests to the Willow multidecryptor.
+// This message is serialized and then authenticated with a MAC.
+message AuthTokenPayload {
+  // The time at which this token becomes invalid.
+  google.protobuf.Timestamp expiration = 1;
+
+  // Add any other relevant data to bind the token to a specific context, for
+  // example, population name, committee id volunteered for, selected member of
+  // a committee, etc.
+}