Interface ResourceServerCreate

Hierarchy

  • ResourceServerCreate

Properties

allow_offline_access?: boolean

Whether refresh tokens can be issued for this API (true) or not (false).

client?: object
enforce_policies?: boolean

Whether to enforce authorization policies (true) or to ignore them (false).

identifier: string

Unique identifier for the API used as the audience parameter on authorization calls. Can not be changed once set.

name?: string

Friendly name for this resource server. Can not contain < or > characters.

scopes?: Scope[]

List of permissions (scopes) that this API uses.

Algorithm used to sign JWTs. Can be HS256 or RS256. PS256 available via addon.

signing_secret?: string

Secret used to sign tokens when using symmetric algorithms (HS256).

skip_consent_for_verifiable_first_party_clients?: boolean

Whether to skip user consent for applications flagged as first party (true) or not (false).

Dialect of issued access token. Can be access_token or access_token_authz (includes permissions). Values can be access_token or access_token_authz (includes permissions).

token_lifetime?: number

Expiration value (in seconds) for access tokens issued for this API from the token endpoint.