Variable clientConfigOf

Type Declaration

• • (
        identifier: any,
    ):
        | {
            assertion_jwks: string;
            authorization_details_types: string[];
            backchannel_logout_session_required: boolean;
            backchannel_logout_uri: string;
            certificate_thumbprint: string;
            client_secret: any;
            client_secret_expires_at: number;
            client_secrets: { expiresAt: number; id: string; secret: any }[];
            declared: boolean;
            frontchannel_logout_session_required: boolean;
            frontchannel_logout_uri: string;
            identifier: string;
            introspection_encrypted_response_alg: string;
            introspection_encrypted_response_enc: string;
            introspection_signed_response_alg: string;
            jwks: string;
            jwks_uri: string;
            known: boolean;
            post_logout_redirect_uris: any;
            redirect_uris: string[];
            registered: boolean;
            request_object_encryption_alg: string;
            request_object_encryption_enc: string;
            request_object_signing_alg: string;
            request_uris: string[];
            require_pushed_authorization_requests: boolean;
            require_signed_request_object: boolean;
            saml_assertion_certificate: string;
            saml_assertion_certificate_chain: string;
            saml_signing_certificate: string;
            sector_identifier_uri: string;
            subject_type: string;
            tls_client_auth_san_dns: string;
            tls_client_auth_san_email: string;
            tls_client_auth_san_ip: string;
            tls_client_auth_san_uri: string;
            tls_client_auth_subject_dn: string;
            tls_client_certificate_bound_access_tokens: boolean;
            token_endpoint_auth_method: string;
            token_endpoint_auth_methods: string[];
            token_endpoint_auth_signing_alg: string;
            unconfirmed_redirect_uris: string[];
        }
        | {
            backchannel_logout_session_required: boolean;
            backchannel_logout_uri: string;
            client_secret: string;
            declared: boolean;
            frontchannel_logout_session_required: boolean;
            frontchannel_logout_uri: string;
            known: boolean;
            post_logout_redirect_uris: any[];
            redirect_uris: any[];
            registered: boolean;
            sector_identifier_uri: string;
            subject_type: string;
            token_endpoint_auth_method: string;
            token_endpoint_auth_methods: any[];
            token_endpoint_auth_signing_alg: string;
        }

  • Returns what a client is allowed to do, as the security checks read it: redirect URIs (confirmed ones only in product), authentication method, logout URIs, subject type and the rest, from the attributes.

    Parameters

    • identifier: any

      the client id

    Returns
        | {
            assertion_jwks: string;
            authorization_details_types: string[];
            backchannel_logout_session_required: boolean;
            backchannel_logout_uri: string;
            certificate_thumbprint: string;
            client_secret: any;
            client_secret_expires_at: number;
            client_secrets: { expiresAt: number; id: string; secret: any }[];
            declared: boolean;
            frontchannel_logout_session_required: boolean;
            frontchannel_logout_uri: string;
            identifier: string;
            introspection_encrypted_response_alg: string;
            introspection_encrypted_response_enc: string;
            introspection_signed_response_alg: string;
            jwks: string;
            jwks_uri: string;
            known: boolean;
            post_logout_redirect_uris: any;
            redirect_uris: string[];
            registered: boolean;
            request_object_encryption_alg: string;
            request_object_encryption_enc: string;
            request_object_signing_alg: string;
            request_uris: string[];
            require_pushed_authorization_requests: boolean;
            require_signed_request_object: boolean;
            saml_assertion_certificate: string;
            saml_assertion_certificate_chain: string;
            saml_signing_certificate: string;
            sector_identifier_uri: string;
            subject_type: string;
            tls_client_auth_san_dns: string;
            tls_client_auth_san_email: string;
            tls_client_auth_san_ip: string;
            tls_client_auth_san_uri: string;
            tls_client_auth_subject_dn: string;
            tls_client_certificate_bound_access_tokens: boolean;
            token_endpoint_auth_method: string;
            token_endpoint_auth_methods: string[];
            token_endpoint_auth_signing_alg: string;
            unconfirmed_redirect_uris: string[];
        }
        | {
            backchannel_logout_session_required: boolean;
            backchannel_logout_uri: string;
            client_secret: string;
            declared: boolean;
            frontchannel_logout_session_required: boolean;
            frontchannel_logout_uri: string;
            known: boolean;
            post_logout_redirect_uris: any[];
            redirect_uris: any[];
            registered: boolean;
            sector_identifier_uri: string;
            subject_type: string;
            token_endpoint_auth_method: string;
            token_endpoint_auth_methods: any[];
            token_endpoint_auth_signing_alg: string;
        }

    the configuration; known: false for a client never seen or whose federation registration ended