Class MonoCloudOidcClientBase

constructor

• new MonoCloudOidcClientBase(
      tenantDomain: string,
      metadataCacheDuration?: number,
      jwksCacheDuration?: number,
      fetcher?: {
          (input: URL | RequestInfo, init?: RequestInit): Promise<Response>;
          (input: string | URL | Request, init?: RequestInit): Promise<Response>;
      },
  ): MonoCloudOidcClientBase

  Creates a new instance of MonoCloudOidcClientBase.

  Parameters

  • tenantDomain: string

    The tenant domain URL.

  • OptionalmetadataCacheDuration: number

    Duration (in seconds) to cache OpenID Connect discovery metadata. Defaults to 300 (5 minutes).

  • OptionaljwksCacheDuration: number

    Duration (in seconds) to cache the JSON Web Key Set (JWKS). Defaults to 300 (5 minutes).

  • Optionalfetcher: {
        (input: URL | RequestInfo, init?: RequestInit): Promise<Response>;
        (input: string | URL | Request, init?: RequestInit): Promise<Response>;
    }

    Custom fetch implementation used for making HTTP requests. Falls back to the global fetch if not provided.

    • • (input: URL | RequestInfo, init?: RequestInit): Promise<Response>

      • MDN Reference

        Parameters

        • input: URL | RequestInfo
        • Optionalinit: RequestInit

        Returns Promise<Response>

      • (input: string | URL | Request, init?: RequestInit): Promise<Response>

      • MDN Reference

        Parameters

        • input: string | URL | Request
        • Optionalinit: RequestInit

        Returns Promise<Response>

  Returns MonoCloudOidcClientBase

Protected Optionalfetcher

Protected Optionaljwks

ProtectedjwksCacheDuration

ProtectedjwksCacheExpiry

Protected Optionalmetadata

ProtectedmetadataCacheDuration

ProtectedmetadataCacheExpiry

Protected ReadonlytenantDomain

StaticdecodeJwt

• decodeJwt(jwt: string): JwtClaims

  Decodes the payload of a JSON Web Token (JWT) and returns it as an object.

  Note: THIS METHOD DOES NOT VERIFY JWT TOKENS.

  Parameters

  • jwt: string

    JWT to decode.

  Returns JwtClaims

  Decoded payload.

  Throws

  MonoCloudTokenError - If decoding fails

getJwks

• getJwks(forceRefresh?: boolean): Promise<Jwks>

  Fetches the JSON Web Keys used to sign the ID token. The JWKS is cached for 5 minutes by default.

  Parameters

  • forceRefresh: boolean = false

    If true, bypasses the cache and fetches fresh set of JWKS from the server.

  Returns Promise<Jwks>

  The JSON Web Key Set containing the public keys for token verification.

  Throws

  MonoCloudHttpError - Thrown if there is a network error during the request or unexpected status code during the request or a serialization error while processing the response.

getMetadata

• getMetadata(forceRefresh?: boolean): Promise<IssuerMetadata>

  Fetches the authorization server metadata from the .well-known endpoint. The metadata is cached for 5 minutes by default.

  Parameters

  • forceRefresh: boolean = false

    If true, bypasses the cache and fetches fresh metadata from the server.

  Returns Promise<IssuerMetadata>

  The issuer metadata for the tenant, retrieved from the OpenID Connect discovery endpoint.

  Throws

  MonoCloudHttpError - Thrown if there is a network error during the request or unexpected status code during the request or a serialization error while processing the response.