Interface: ExchangeInput

@ticketlayer/backstage

@ticketlayer/backstage / ExchangeInput

Defined in: auth/index.ts:237

Credentials for a token endpoint call.

Extends#

• ClientCredentials

Properties#

clientId?#

optional clientId: string;

Defined in: auth/index.ts:223

Defaults to AuthConfig.clientId.

Inherited from#

ClientCredentials.clientId

clientSecret?#

optional clientSecret: string;

Defined in: auth/index.ts:232

SERVER USE ONLY. The confidential client's secret (the shell's BFF, backstage-shell), sent as HTTP Basic (client_secret_basic). It must never ship to a browser, an Electron renderer or anything else a person can open: a public client (a packaged app) has no secret and proves itself with PKCE and DPoP instead. Refused where window and document exist.

Inherited from#

ClientCredentials.clientSecret

code#

code: string;

Defined in: auth/index.ts:238

codeVerifier#

codeVerifier: string;

Defined in: auth/index.ts:239

dpop?#

optional dpop: DpopKey;

Defined in: auth/index.ts:234

Bind the tokens to this key (DPoP): a proof goes with the call.

Inherited from#

ClientCredentials.dpop

redirectUri?#

optional redirectUri: string;

Defined in: auth/index.ts:241

The redirectUri the step answered with the code. May be omitted when the client has only one registered.