Skip to main content

AccessClaims

@webda/core

Interface: AccessClaims

Defined in: packages/core/src/services/token.service.ts:70

Claims carried by an access token

Properties​

amr​

amr: string[]

Defined in: packages/core/src/services/token.service.ts:74

aud?​

optional aud?: string | string[]

Defined in: packages/core/src/services/token.service.ts:84

Audience: the bound resource, or ACCESS_AUDIENCE

authAt?​

optional authAt?: number

Defined in: packages/core/src/services/token.service.ts:82

When the session was authenticated (ms): checked against the user's last password change

client_id?​

optional client_id?: string

Defined in: packages/core/src/services/token.service.ts:88

OAuth client the token was issued to

fam​

fam: string

Defined in: packages/core/src/services/token.service.ts:76

iat?​

optional iat?: number

Defined in: packages/core/src/services/token.service.ts:90

Issued at, seconds (set by the JWT signer)

iatMs?​

optional iatMs?: number

Defined in: packages/core/src/services/token.service.ts:92

Issued at, ms: iat only has a 1 s resolution, which is too coarse to order a token against a revocation

ident​

ident: string

Defined in: packages/core/src/services/token.service.ts:72

mfa​

mfa: MfaState

Defined in: packages/core/src/services/token.service.ts:77

mfaAt?​

optional mfaAt?: number

Defined in: packages/core/src/services/token.service.ts:79

When the second factor was verified (ms), carried unchanged across refreshes

mfaVerifications?​

optional mfaVerifications?: Record<string, MfaVerification>

Defined in: packages/core/src/services/token.service.ts:80

provider?​

optional provider?: string

Defined in: packages/core/src/services/token.service.ts:73

roles?​

optional roles?: string[]

Defined in: packages/core/src/services/token.service.ts:75

scope?​

optional scope?: string

Defined in: packages/core/src/services/token.service.ts:86

Granted scope (space-separated operation globs)

sub​

sub: string

Defined in: packages/core/src/services/token.service.ts:71