Interface ClientCredentialsOptions

interface ClientCredentialsOptions {
    clientId: string;
    clientSecret: string;
    clockSkewSeconds?: number;
    fetch?: typeof fetch;
    identityUrl: string;
    scopes?: readonly string[];
}

Properties

clientId: string

clientSecret: string

clockSkewSeconds?: number

Treat a token as expired this many seconds before its true expiry. RFC 6749 §10.4 — buffer for clock drift + flight time.

fetch?: typeof fetch

Inject a custom fetch (tests, instrumentation). Defaults to global fetch.

identityUrl: string

IdentityServer base URL, e.g. https://identity.example. Discovery doc resolved as ${identityUrl}/.well-known/openid-configuration.

scopes?: readonly string[]