Sake.Auth.Code (Sake v0.4.3)

Copy Markdown View Source

An authorization code (stored hashed). dpop_jkt is the thumbprint of the DPoP key the code is bound to (RFC 9449 §10), or nil: the token request that redeems a bound code must carry a proof made with that key. acr and auth_time are how and when the person signed in when they approved it (Sake.Auth.Subject.authentication/1), or nil, which its tokens carry (RFC 9470). nonce is the authorization request's OpenID Connect nonce, or nil, which the ID token issued for the code carries.

Summary

Types

t()

Types

t()

@type t() :: %Sake.Auth.Code{
  acr: term(),
  auth_time: term(),
  client_id: term(),
  code_challenge: term(),
  dpop_jkt: term(),
  expires_at: term(),
  hash: term(),
  nonce: term(),
  redirect_uri: term(),
  resource: term(),
  scopes: term(),
  subject_id: term()
}