Skip to main content
Deno 2 is finally here 🎉️
Learn more
Module

x/oauth4webapi/mod.ts>validateDetachedSignatureResponse

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
panva/oauth4webapi
Latest
function validateDetachedSignatureResponse
import { validateDetachedSignatureResponse } from "https://deno.land/x/oauth4webapi@v3.1.2/mod.ts";

Same as validateAuthResponse but for FAPI 1.0 Advanced Detached Signature authorization responses.

Parameters

as: AuthorizationServer

Authorization Server Metadata.

client: Client

Client Metadata.

parameters: URLSearchParams | URL | Request

Authorization Response parameters as URLSearchParams, instance of URL with parameters in a fragment/hash, or a form_post Request instance.

expectedNonce: string

Expected ID Token nonce claim value.

optional
expectedState: string | expectNoState

Expected state parameter value. Default is expectNoState.

optional
maxAge: number | skipAuthTimeCheck

ID Token IDToken.auth_time | auth_time claim value will be checked to be present and conform to the maxAge value. Use of this option is required if you sent a max_age parameter in an authorization request. Default is Client.default_max_age | client.default_max_age and falls back to skipAuthTimeCheck.

Returns

Promise<URLSearchParams>

Validated Authorization Response parameters. Authorization Error Responses are rejected using AuthorizationResponseError.