Interface: ImplicitAuthenticationResponseChecks

March 19, 2026 ยท View on GitHub

๐Ÿ’— Help the project

Support from the community to continue maintaining and improving this module is welcome. If you find the module useful, please consider supporting the project by becoming a sponsor.


Properties

expectedState?

โ€ข optional expectedState?: string | typeof skipStateCheck

Expected value of the state authorization response parameter. This value must match exactly. When undefined the expectation is that there is no state in the authorization response.


maxAge?

โ€ข optional maxAge?: number

ID Token auth\_time claim value will be checked to be present and conform to this maxAge value. Use of this option is required if you sent a max_age parameter in the authorization request. Default is ClientMetadata.default_max_age and falls back to not checking the claim's value beyond it being a number when present.