Variable resourceServerRefusal

Type Declaration

• • (token: unknown, claims: any, base: string, options?: any): Refusal

  • Makes section 4's checks of type, issuer and audience for a token already verified, at a resource server here.

    Parameters

    • token: unknown

      the compact token, for its header

    • claims: any

      its verified claims

    • base: string

      the request's base URL

    • Optionaloptions: any

      audience ({ names, label }), which replaces the audience check for a resource server answering for a registered application

    Returns Refusal

    null to accept, or an invalid_token refusal { error, description } carrying its error code