AccessClaims

@webda/core

---

Interface: AccessClaims

Defined in: packages/core/src/services/token.service.ts:103

Claims carried by an access token

Properties

amr

amr: string[]

Defined in: packages/core/src/services/token.service.ts:119

Amr

---

aud?

optional aud?: string | string[]

Defined in: packages/core/src/services/token.service.ts:141

Audience: the bound resource, or ACCESS_AUDIENCE

---

authAt?

optional authAt?: number

Defined in: packages/core/src/services/token.service.ts:139

When the session was authenticated (ms): checked against the user's last password change

---

client_id?

optional client_id?: string

Defined in: packages/core/src/services/token.service.ts:145

OAuth client the token was issued to

---

fam

fam: string

Defined in: packages/core/src/services/token.service.ts:127

Fam

---

iat?

optional iat?: number

Defined in: packages/core/src/services/token.service.ts:147

Issued at, seconds (set by the JWT signer)

---

iatMs?

optional iatMs?: number

Defined in: packages/core/src/services/token.service.ts:149

Issued at, ms: iat only has a 1 s resolution, which is too coarse to order a token against a revocation

---

ident

ident: string

Defined in: packages/core/src/services/token.service.ts:111

Ident

---

mfa

mfa: MfaState

Defined in: packages/core/src/services/token.service.ts:131

MFA

---

mfaAt?

optional mfaAt?: number

Defined in: packages/core/src/services/token.service.ts:133

When the second factor was verified (ms), carried unchanged across refreshes

---

mfaVerifications?

optional mfaVerifications?: Record<string, MfaVerification>

Defined in: packages/core/src/services/token.service.ts:137

MFA verifications

---

provider?

optional provider?: string

Defined in: packages/core/src/services/token.service.ts:115

Provider

---

roles?

optional roles?: string[]

Defined in: packages/core/src/services/token.service.ts:123

Roles

---

scope?

optional scope?: string

Defined in: packages/core/src/services/token.service.ts:143

Granted scope (space-separated operation globs)

---

sub

sub: string

Defined in: packages/core/src/services/token.service.ts:107

Sub