Skip to content
Docs
Open Backstage
Reference

Interface: RevokeInput

Interface: RevokeInput in @ticketlayer/backstage.

@ticketlayer/backstage

@ticketlayer/backstage / RevokeInput

Defined in: auth/index.ts:257

Extends#

Properties#

clientId?#

optional clientId: string;

Defined in: auth/index.ts:223

Defaults to AuthConfig.clientId.

Inherited from#

ClientCredentials.clientId

clientSecret?#

optional clientSecret: string;

Defined in: auth/index.ts:232

SERVER USE ONLY. The confidential client's secret (the shell's BFF, backstage-shell), sent as HTTP Basic (client_secret_basic). It must never ship to a browser, an Electron renderer or anything else a person can open: a public client (a packaged app) has no secret and proves itself with PKCE and DPoP instead. Refused where window and document exist.

Inherited from#

ClientCredentials.clientSecret

token#

token: string;

Defined in: auth/index.ts:259

The token to revoke. Give the refresh token: revoking it ends its whole family.

tokenTypeHint?#

optional tokenTypeHint: "access_token" | "refresh_token";

Defined in: auth/index.ts:265

What token is, as a hint to the issuer (RFC 7009 2.1). An access token from this issuer is a JWT, which lives out its fifteen minutes whatever is revoked: revoke the refresh token instead.