Variable tokenRefusal

Type Declaration

• • (requirement: Requirement, claims: any, options?: any): any

  • Tells a resource server whether a presented access token's claims meet its requirement. A token with no auth_time or acr does not meet one, and no clock skew is allowed on the age.

    Parameters

    • requirement: Requirement

      the resource's requirement

    • claims: any

      the token's verified claims

    • Optionaloptions: any

      the caller's options, such as the time to compare with

    Returns any

    null when met, or { error: 'insufficient_user_authentication', description, reason } with its code under the Symbol