PendingRequest

@webda/oauth

---

Interface: PendingRequest

Defined in: packages/oauth/src/pending.ts:11

Validated authorization request waiting for login and consent, kept in an encrypted cookie

Properties

clientId

clientId: string

Defined in: packages/oauth/src/pending.ts:15

client_id

---

codeChallenge?

optional codeChallenge?: string

Defined in: packages/oauth/src/pending.ts:21

PKCE S256 challenge (code flow)

---

csrf

csrf: string

Defined in: packages/oauth/src/pending.ts:33

CSRF token bound to this request

---

expires

expires: number

Defined in: packages/oauth/src/pending.ts:35

Expiry (ms since epoch)

---

flow

flow: "code" | "device"

Defined in: packages/oauth/src/pending.ts:13

Authorization code or device flow

---

hostname?

optional hostname?: string

Defined in: packages/oauth/src/pending.ts:25

Hostname of the device requesting access, shown on the consent page

---

redirectUri?

optional redirectUri?: string

Defined in: packages/oauth/src/pending.ts:17

Validated redirect_uri (code flow)

---

resource?

optional resource?: string

Defined in: packages/oauth/src/pending.ts:27

Resource the tokens are bound to (RFC 8707), validated (code flow)

---

scope

scope: string

Defined in: packages/oauth/src/pending.ts:23

Requested scope, normalized

---

state?

optional state?: string

Defined in: packages/oauth/src/pending.ts:19

Client state, echoed on the redirect

---

userCode?

optional userCode?: string

Defined in: packages/oauth/src/pending.ts:29

Device user code (device flow)

---

userId?

optional userId?: string

Defined in: packages/oauth/src/pending.ts:31

User the request is bound to: the signed-in user when consent is first shown