Skip to main content
Defined in: client/auth.ts:530 Shared-secret configuration for ClientCredentials. authMethod selects how the secret reaches the token endpoint:
  • client_secret_post (default) — client_id and client_secret in the POST body. Unchanged from earlier releases.
  • client_secret_basic — an RFC 6749 §2.3.1 HTTP Basic Authorization header. Nothing secret goes in the body.

​
Extends

  • ClientCredentialsBaseOptions

​
Properties

​
algorithm?

Defined in: client/auth.ts:535

​
authMethod?

Defined in: client/auth.ts:533 Token-endpoint authentication method. Default: client_secret_post.

​
clientId

Defined in: client/auth.ts:506

​
Inherited from

​
clientSecret

Defined in: client/auth.ts:531

​
privateKey?

Defined in: client/auth.ts:534

​
refreshBufferSeconds?

Defined in: client/auth.ts:518 How many seconds before expiry to proactively re-fetch. Default: 60.

​
Inherited from

​
scope?

Defined in: client/auth.ts:507

​
Inherited from

​
store?

Defined in: client/auth.ts:516 Persistent token store. Default: in-memory. The cache key is derived from tokenEndpoint alone, with no client identity in it — use one store per credential identity. Do not share a persistent store across two ClientCredentials instances that have different clientId/clientSecret/ privateKey but the same tokenEndpoint; they will read and overwrite each other’s cached tokens.

​
Inherited from

​
tokenEndpoint

Defined in: client/auth.ts:505

​
Inherited from