Skip to content
Docs
Reference

Interface: ClientCredentials

Interface: ClientCredentials in @ticketlayer/backstage.

@ticketlayer/backstage


@ticketlayer/backstage / ClientCredentials

Defined in: auth/index.ts:221

Credentials for a token endpoint call.

Extended by#

Properties#

clientId?#

optional clientId: string;

Defined in: auth/index.ts:223

Defaults to AuthConfig.clientId.


clientSecret?#

optional clientSecret: string;

Defined in: auth/index.ts:232

SERVER USE ONLY. The confidential client's secret (the shell's BFF, backstage-shell), sent as HTTP Basic (client_secret_basic). It must never ship to a browser, an Electron renderer or anything else a person can open: a public client (a packaged app) has no secret and proves itself with PKCE and DPoP instead. Refused where window and document exist.


dpop?#

optional dpop: DpopKey;

Defined in: auth/index.ts:234

Bind the tokens to this key (DPoP): a proof goes with the call.