Skip to content

Configuration

Defined in: @types/oidc-provider/index.d.ts:935

optional acceptQueryParamAccessTokens?: boolean

Defined in: @types/oidc-provider/index.d.ts:1413


optional acrValues?: string[] | Set<string>

Defined in: @types/oidc-provider/index.d.ts:936


optional adapter?: AdapterFactory | AdapterConstructor

Defined in: @types/oidc-provider/index.d.ts:938


optional allowOmittingSingleRegisteredRedirectUri?: boolean

Defined in: @types/oidc-provider/index.d.ts:1411


optional assertJwtClientAuthClaimsAndHeader?: (ctx, claims, header, client) => CanBePromise<void>

Defined in: @types/oidc-provider/index.d.ts:999

KoaContextWithOIDC

Record<string, JsonValue>

Record<string, JsonValue>

Client

CanBePromise<void>


optional claims?: object

Defined in: @types/oidc-provider/index.d.ts:940

[key: string]: string[] | null


optional clientAuthMethods?: ClientAuthMethod[]

Defined in: @types/oidc-provider/index.d.ts:1364


optional clientBasedCORS?: (ctx, origin, client) => boolean

Defined in: @types/oidc-provider/index.d.ts:946

KoaContextWithOIDC

string

Client

boolean


optional clientDefaults?: AllClientMetadata

Defined in: @types/oidc-provider/index.d.ts:967


optional clients?: ClientMetadata[]

Defined in: @types/oidc-provider/index.d.ts:948


optional clockTolerance?: number

Defined in: @types/oidc-provider/index.d.ts:969


optional conformIdTokenClaims?: boolean

Defined in: @types/oidc-provider/index.d.ts:971


optional cookies?: object

Defined in: @types/oidc-provider/index.d.ts:973

optional keys?: (string | Buffer<ArrayBufferLike>)[] | Keygrip

optional long?: CookiesSetOptions

optional names?: object

optional interaction?: string

optional resume?: string

optional session?: string

optional state?: string

optional short?: CookiesSetOptions


optional discovery?: UnknownObject

Defined in: @types/oidc-provider/index.d.ts:989


optional enabledJWA?: object

Defined in: @types/oidc-provider/index.d.ts:1424

optional authorizationEncryptionAlgValues?: EncryptionAlgValues[]

optional authorizationEncryptionEncValues?: EncryptionEncValues[]

optional authorizationSigningAlgValues?: SigningAlgorithm[]

optional clientAuthSigningAlgValues?: SigningAlgorithm[]

optional dPoPSigningAlgValues?: AsymmetricSigningAlgorithm[]

optional idTokenEncryptionAlgValues?: EncryptionAlgValues[]

optional idTokenEncryptionEncValues?: EncryptionEncValues[]

optional idTokenSigningAlgValues?: SigningAlgorithmWithNone[]

optional introspectionEncryptionAlgValues?: EncryptionAlgValues[]

optional introspectionEncryptionEncValues?: EncryptionEncValues[]

optional introspectionSigningAlgValues?: SigningAlgorithmWithNone[]

optional requestObjectEncryptionAlgValues?: EncryptionAlgValues[]

optional requestObjectEncryptionEncValues?: EncryptionEncValues[]

optional requestObjectSigningAlgValues?: SigningAlgorithmWithNone[]

optional userinfoEncryptionAlgValues?: EncryptionAlgValues[]

optional userinfoEncryptionEncValues?: EncryptionEncValues[]

optional userinfoSigningAlgValues?: SigningAlgorithmWithNone[]


optional enableHttpPostMethods?: boolean

Defined in: @types/oidc-provider/index.d.ts:991


optional expiresWithSession?: (ctx, token) => CanBePromise<boolean>

Defined in: @types/oidc-provider/index.d.ts:1315

KoaContextWithOIDC

AuthorizationCode | AccessToken | DeviceCode

CanBePromise<boolean>


optional extraClientMetadata?: object

Defined in: @types/oidc-provider/index.d.ts:1385

optional properties?: string[]

optional validator?: (ctx, key, value, metadata) => void | undefined

KoaContextWithOIDC

string

unknown

ClientMetadata

void | undefined


optional extraParams?: string[] | {[param: string]: ((ctx, value, client) => CanBePromise<void>) | null; }

Defined in: @types/oidc-provider/index.d.ts:993


optional extraTokenClaims?: (ctx, token) => CanBePromise<UnknownObject | undefined>

Defined in: @types/oidc-provider/index.d.ts:1309

KoaContextWithOIDC

AccessToken | ClientCredentials

CanBePromise<UnknownObject | undefined>


optional features?: object

Defined in: @types/oidc-provider/index.d.ts:1006

optional attestClientAuth?: object

[key: string]: any

optional ack?: string

optional enabled?: boolean

optional backchannelLogout?: object

optional enabled?: boolean

optional ciba?: object

deliveryModes: CIBADeliveryMode[]

optional enabled?: boolean

optional processLoginHint?: (ctx, loginHint?) => CanBePromise<string | undefined>

KoaContextWithOIDC

string

CanBePromise<string | undefined>

optional processLoginHintToken?: (ctx, loginHintToken?) => CanBePromise<string | undefined>

KoaContextWithOIDC

string

CanBePromise<string | undefined>

optional triggerAuthenticationDevice?: (ctx, request, account, client) => CanBePromise<void>

KoaContextWithOIDC

BackchannelAuthenticationRequest

Account

Client

CanBePromise<void>

optional validateBindingMessage?: (ctx, bindingMessage?) => CanBePromise<void>

KoaContextWithOIDC

string

CanBePromise<void>

optional validateRequestContext?: (ctx, requestContext?) => CanBePromise<void>

KoaContextWithOIDC

string

CanBePromise<void>

optional verifyUserCode?: (ctx, userCode?) => CanBePromise<void>

KoaContextWithOIDC

string

CanBePromise<void>

optional claimsParameter?: object

optional assertClaimsParameter?: (ctx, claims, client) => CanBePromise<void>

KoaContextWithOIDC

ClaimsParameter

Client

CanBePromise<void>

optional enabled?: boolean

optional clientCredentials?: object

optional enabled?: boolean

optional deviceFlow?: object

optional charset?: "base-20" | "digits"

optional deviceInfo?: (ctx) => UnknownObject

KoaContextWithOIDC

UnknownObject

optional enabled?: boolean

optional mask?: string

optional successSource?: (ctx) => CanBePromise<void | undefined>

KoaContextWithOIDC

CanBePromise<void | undefined>

optional userCodeConfirmSource?: (ctx, form, client, deviceInfo, userCode) => CanBePromise<void | undefined>

KoaContextWithOIDC

string

Client

UnknownObject

string

CanBePromise<void | undefined>

optional userCodeInputSource?: (ctx, form, out?, err?) => CanBePromise<void | undefined>

KoaContextWithOIDC

string

ErrorOut

OIDCProviderError | Error

CanBePromise<void | undefined>

optional devInteractions?: object

optional enabled?: boolean

optional dPoP?: object

optional allowReplay?: boolean

optional enabled?: boolean

optional nonceSecret?: Buffer<ArrayBufferLike>

optional requireNonce?: (ctx) => boolean

KoaContextWithOIDC

boolean

optional encryption?: object

optional enabled?: boolean

optional externalSigningSupport?: object

[key: string]: any

optional ack?: string

optional enabled?: boolean

optional fapi?: object

optional enabled?: boolean

profile: FapiProfile | ((ctx, client) => FapiProfile) | undefined

optional introspection?: object

optional allowedPolicy?: (ctx, client, token) => CanBePromise<boolean>

KoaContextWithOIDC

Client

AccessToken | ClientCredentials | RefreshToken

CanBePromise<boolean>

optional enabled?: boolean

optional jwtIntrospection?: object

optional enabled?: boolean

optional jwtResponseModes?: object

optional enabled?: boolean

optional jwtUserinfo?: object

optional enabled?: boolean

optional mTLS?: object

optional certificateAuthorized?: (ctx) => boolean

KoaContextWithOIDC

boolean

optional certificateBoundAccessTokens?: boolean

optional certificateSubjectMatches?: (ctx, property, expected) => boolean

KoaContextWithOIDC

TLSClientAuthProperty

string

boolean

optional enabled?: boolean

optional getCertificate?: (ctx) => string | X509Certificate | undefined

KoaContextWithOIDC

string | X509Certificate | undefined

optional selfSignedTlsClientAuth?: boolean

optional tlsClientAuth?: boolean

optional pushedAuthorizationRequests?: object

pushedAuthorizationRequests.allowUnregisteredRedirectUris?
Section titled “pushedAuthorizationRequests.allowUnregisteredRedirectUris?”

optional allowUnregisteredRedirectUris?: boolean

optional enabled?: boolean

pushedAuthorizationRequests.requirePushedAuthorizationRequests?
Section titled “pushedAuthorizationRequests.requirePushedAuthorizationRequests?”

optional requirePushedAuthorizationRequests?: boolean

optional registration?: object

optional enabled?: boolean

optional idFactory?: (ctx) => string

KoaContextWithOIDC

string

optional initialAccessToken?: string | boolean

registration.issueRegistrationAccessToken?
Section titled “registration.issueRegistrationAccessToken?”

optional issueRegistrationAccessToken?: boolean | IssueRegistrationAccessTokenFunction

optional policies?: object

[key: string]: (ctx, metadata) => CanBePromise<void | undefined>

optional secretFactory?: (ctx) => string

KoaContextWithOIDC

string

optional registrationManagement?: object

optional enabled?: boolean

registrationManagement.rotateRegistrationAccessToken?
Section titled “registrationManagement.rotateRegistrationAccessToken?”

optional rotateRegistrationAccessToken?: boolean | RotateRegistrationAccessTokenFunction

optional requestObjects?: object

optional assertJwtClaimsAndHeader?: (ctx, claims, header, client) => CanBePromise<void>

KoaContextWithOIDC

Record<string, JsonValue>

Record<string, JsonValue>

Client

CanBePromise<void>

optional enabled?: boolean

requestObjects.requireSignedRequestObject?
Section titled “requestObjects.requireSignedRequestObject?”

optional requireSignedRequestObject?: boolean

optional resourceIndicators?: object

optional defaultResource?: (ctx, client, oneOf?) => CanBePromise<string | string[]>

KoaContextWithOIDC

Client

string[]

CanBePromise<string | string[]>

optional enabled?: boolean

optional getResourceServerInfo?: (ctx, resourceIndicator, client) => CanBePromise<ResourceServer>

KoaContextWithOIDC

string

Client

CanBePromise<ResourceServer>

optional useGrantedResource?: (ctx, model) => CanBePromise<boolean>

KoaContextWithOIDC

AuthorizationCode | DeviceCode | BackchannelAuthenticationRequest | RefreshToken

CanBePromise<boolean>

optional revocation?: object

optional allowedPolicy?: (ctx, client, token) => CanBePromise<boolean>

KoaContextWithOIDC

Client

AccessToken | ClientCredentials | RefreshToken

CanBePromise<boolean>

optional enabled?: boolean

optional richAuthorizationRequests?: object

[key: string]: any

optional ack?: string

optional enabled?: boolean

optional rpInitiatedLogout?: object

optional enabled?: boolean

optional logoutSource?: (ctx, form) => CanBePromise<void | undefined>

KoaContextWithOIDC

string

CanBePromise<void | undefined>

rpInitiatedLogout.postLogoutSuccessSource?
Section titled “rpInitiatedLogout.postLogoutSuccessSource?”

optional postLogoutSuccessSource?: (ctx) => CanBePromise<void | undefined>

KoaContextWithOIDC

CanBePromise<void | undefined>

optional rpMetadataChoices?: object

[key: string]: any

optional ack?: string

optional enabled?: boolean

optional userinfo?: object

optional enabled?: boolean

optional webMessageResponseMode?: object

optional ack?: string

optional enabled?: boolean


optional fetch?: {(input, init?): Promise<Response>; (input, init?): Promise<Response>; }

Defined in: @types/oidc-provider/index.d.ts:1313

(input, init?): Promise<Response>

MDN Reference

RequestInfo | URL

RequestInit

Promise<Response>

(input, init?): Promise<Response>

MDN Reference

string | Request | URL

RequestInit

Promise<Response>


optional findAccount?: FindAccount

Defined in: @types/oidc-provider/index.d.ts:1422


optional formats?: object

Defined in: @types/oidc-provider/index.d.ts:950

optional bitsOfOpaqueRandomness?: number | ((ctx, model) => number)

optional customizers?: object

optional jwt?: (ctx, token, parts) => CanBePromise<JWTStructured>

KoaContextWithOIDC

AccessToken | ClientCredentials

JWTStructured

CanBePromise<JWTStructured>


optional interactions?: object

Defined in: @types/oidc-provider/index.d.ts:1415

optional policy?: Prompt[]

optional url?: (ctx, interaction) => CanBePromise<string>

KoaContextWithOIDC

Interaction

CanBePromise<string>


optional issueRefreshToken?: (ctx, client, code) => CanBePromise<boolean>

Defined in: @types/oidc-provider/index.d.ts:1319

KoaContextWithOIDC

Client

AuthorizationCode | DeviceCode | BackchannelAuthenticationRequest

CanBePromise<boolean>


optional jwks?: JWKS

Defined in: @types/oidc-provider/index.d.ts:1327


optional loadExistingGrant?: (ctx) => CanBePromise<Grant | undefined>

Defined in: @types/oidc-provider/index.d.ts:1383

KoaContextWithOIDC

CanBePromise<Grant | undefined>


optional pairwiseIdentifier?: (ctx, accountId, client) => CanBePromise<string>

Defined in: @types/oidc-provider/index.d.ts:1360

KoaContextWithOIDC

string

Client

CanBePromise<string>


optional pkce?: object

Defined in: @types/oidc-provider/index.d.ts:1333

optional required?: (ctx, client) => boolean

KoaContextWithOIDC

Client

boolean


optional renderError?: (ctx, out, error) => CanBePromise<void | undefined>

Defined in: @types/oidc-provider/index.d.ts:1403

KoaContextWithOIDC

ErrorOut

OIDCProviderError | Error

CanBePromise<void | undefined>


optional responseTypes?: ResponseType[]

Defined in: @types/oidc-provider/index.d.ts:1329


optional revokeGrantPolicy?: (ctx) => boolean

Defined in: @types/oidc-provider/index.d.ts:1331

KoaContextWithOIDC

boolean


optional rotateRefreshToken?: boolean | ((ctx) => CanBePromise<boolean>)

Defined in: @types/oidc-provider/index.d.ts:1401


optional routes?: object

Defined in: @types/oidc-provider/index.d.ts:1339

optional authorization?: string

optional backchannel_authentication?: string

optional code_verification?: string

optional device_authorization?: string

optional end_session?: string

optional introspection?: string

optional jwks?: string

optional pushed_authorization_request?: string

optional registration?: string

optional revocation?: string

optional token?: string

optional userinfo?: string


optional scopes?: string[]

Defined in: @types/oidc-provider/index.d.ts:1356


optional subjectTypes?: SubjectTypes[]

Defined in: @types/oidc-provider/index.d.ts:1358


optional ttl?: object

Defined in: @types/oidc-provider/index.d.ts:1366

[key: string]: unknown

optional AccessToken?: number | TTLFunction<AccessToken>

optional AuthorizationCode?: number | TTLFunction<AuthorizationCode>

optional BackchannelAuthenticationRequest?: number | TTLFunction<BackchannelAuthenticationRequest>

optional ClientCredentials?: number | TTLFunction<ClientCredentials>

optional DeviceCode?: number | TTLFunction<DeviceCode>

optional Grant?: number | TTLFunction<Grant>

optional IdToken?: number | TTLFunction<IdToken>

optional Interaction?: number | TTLFunction<Interaction>

optional RefreshToken?: number | TTLFunction<RefreshToken>

optional Session?: number | TTLFunction<Session>