new MonoCloudOidcBackendClient(tenantDomain:string,audience:string,options?:MonoCloudOidcBackendClientOptions):MonoCloudOidcBackendClient
Creates a new instance of MonoCloudOidcBackendClient.
| Parameter | Type | Description |
|---|---|---|
tenantDomain | string | The tenant domain URL. |
audience | string | The expected audience value used to validate the aud claim in access tokens. |
options? | MonoCloudOidcBackendClientOptions | Additional client configuration options. |
Decodes the payload of a JSON Web Token (JWT) and returns it as an object.
Note: THIS METHOD DOES NOT VERIFY JWT TOKENS.
| Parameter | Type | Description |
|---|---|---|
jwt | string | JWT to decode. |
MonoCloudTokenError - If decoding fails
Fetches the JSON Web Keys used to sign the ID token. The JWKS is cached for 5 minutes by default.
| Parameter | Type | Description |
|---|---|---|
forceRefresh | boolean | If true, bypasses the cache and fetches fresh set of JWKS from the server. |
MonoCloudHttpError - Thrown if there is a network error during the request or unexpected status code during the request or a serialization error while processing the response.
Fetches the authorization server metadata from the .well-known endpoint. The metadata is cached for 5 minutes by default.
| Parameter | Type | Description |
|---|---|---|
forceRefresh | boolean | If true, bypasses the cache and fetches fresh metadata from the server. |
Promise<IssuerMetadata>
The issuer metadata for the tenant, retrieved from the OpenID Connect discovery endpoint.
MonoCloudHttpError - Thrown if there is a network error during the request or unexpected status code during the request or a serialization error while processing the response.
Validates an opaque access token using the OAuth 2.0 Token Introspection endpoint (RFC 7662).
| Parameter | Type | Description |
|---|---|---|
accessToken | string | The access token string to introspect. |
options? | IntrospectOptions | Claims validation options. |
MonoCloudTokenError - If the token is not active or claim validation fails.
MonoCloudOPError - When the introspection endpoint returns a standardized OAuth 2.0 error response.
MonoCloudHttpError - Thrown if there is a network error during the request or unexpected status code during the request or a serialization error while processing the response.
MonoCloudValidationError - When the access token is empty or the introspection endpoint is not available in the issuer metadata or claims validation fails.
setClockSkew(clockSkew:number):void
Sets clock skew used for access token time-based claim validation.
| Parameter | Type | Description |
|---|---|---|
clockSkew | number | Number of seconds to adjust the current time to account for clock differences. |
void
setClockTolerance(clockTolerance:number):void
Sets clock tolerance used for access token time-based claim validation.
| Parameter | Type | Description |
|---|---|---|
clockTolerance | number | Additional time tolerance in seconds for time-based claim validation. |
void
validateJwtAccessToken(accessToken:string,options?:ValidateJwtAccessTokenOptions):Promise<AccessTokenClaims>
Validates a JWT access token by verifying the signature and claims.
| Parameter | Type | Description |
|---|---|---|
accessToken | string | The access token JWT string to validate. |
options? | ValidateJwtAccessTokenOptions | Validation options. |
MonoCloudTokenError - If JWT parsing, signature verification, or claim validation fails.
MonoCloudHttpError - Thrown if there is a network error during the request or unexpected status code during the request or a serialization error while processing the response.
MonoCloudValidationError - When the access token is empty or claims validation fails.