Configuration options used to initialize the MonoCloudOidcBackendClient.
optionalclientAuthMethod:ClientAuthMethod
Client authentication method used when the client authenticates to the authorization server.
"client_secret_basic";
optionalclientId:string
Client identifier of the application registered in MonoCloud.
Client secret or key material used for client authentication.
When clientAuthMethod is client_secret_jwt and a plain-text secret is provided, the default signing algorithm is HS256.
To use a different algorithm, provide a symmetric JSON Web Key (JWK) (kty: "oct") with the desired algorithm specified in its alg property.
When clientAuthMethod is spiffe_jwt, provide the SPIFFE JWT-SVID (obtained from the SPIFFE Workload API) as the plain-text string; it is sent as the client_assertion.
optionalclockSkew:number
Number of seconds to adjust the current time to account for clock differences.
0;
optionalclockTolerance:number
Additional time tolerance in seconds for time-based claim validation.
300;
optionalfetcher: {(input:URL|RequestInfo,init?:RequestInit):Promise<Response>; (input:string|URL|Request,init?:RequestInit):Promise<Response>; }
Optional custom fetch implementation used for network requests.
(input:URL|RequestInfo,init?:RequestInit):Promise<Response>
| Parameter | Type |
|---|---|
input | URL | RequestInfo |
init? | RequestInit |
Promise<Response>
(input:string|URL|Request,init?:RequestInit):Promise<Response>
| Parameter | Type |
|---|---|
input | string | URL | Request |
init? | RequestInit |
Promise<Response>
optionalgroupOptions:IsUserInGroupOptions
Options for group membership validation applied to all token validations performed by this client.
optionaljwksCacheDuration:number
Duration (in seconds) to cache the JSON Web Key Set (JWKS) retrieved from the authorization server.
300;
Optional custom resolver for the JSON Web Key Set (JWKS).
optionalmetadataCacheDuration:number
Duration (in seconds) to cache OpenID Connect discovery metadata.
300;
Optional custom resolver for the issuer metadata (OpenID Connect discovery document).
IssuerMetadata | Promise<IssuerMetadata>
optionaltrustStoreId:string
Identifier of the trust store whose mTLS endpoint aliases should be used when authenticating with a mutual-TLS client authentication method.