Interface: AuthorizationRequest
Defined in: canton/authentication/authorization-code.ts:68
PKCE + state material generated for an authorization request.
The embedder keeps the verifier and state secret (server-side / in
process memory) and uses them to validate the callback and exchange the code.
The codeChallenge and authorizeUrl are safe to send to the browser.
Properties
authorizeUrl
authorizeUrl:
string
Defined in: canton/authentication/authorization-code.ts:70
The full authorization endpoint URL to redirect the user to.
codeChallenge
codeChallenge:
string
Defined in: canton/authentication/authorization-code.ts:74
The S256 code challenge derived from verifier (sent in the authorize URL).
redirectUri
redirectUri:
string
Defined in: canton/authentication/authorization-code.ts:78
The redirect URI the authorization server will redirect back to.
state
state:
string
Defined in: canton/authentication/authorization-code.ts:76
The OAuth2 state parameter — keep secret; required to validate the callback.
verifier
verifier:
string
Defined in: canton/authentication/authorization-code.ts:72
The PKCE code verifier — keep secret; required for the token exchange.