Interface: WWWAuthenticateChallengeParameters
March 19, 2026 Ā· View on GitHub
Support from the community to continue maintaining and improving this module is welcome. If you find the module useful, please consider supporting the project by becoming a sponsor.
WWW-Authenticate challenge auth-param dictionary with known and unknown parameter names
Indexable
[
parameter:Lowercase<string>]:string|undefined
Note
Because the parameter names are case insensitive they are always returned lowercased
Properties
algs?
⢠readonly optional algs?: string
A space-delimited list of supported algorithms, used in RFC 9449 - OAuth 2.0 Demonstrating Proof of Possession (DPoP) challenges
error?
⢠readonly optional error?: string
A machine-readable error code value
error_description?
⢠readonly optional error_description?: string
Human-readable ASCII text providing additional information, used to assist the client developer in understanding the error that occurred
error_uri?
⢠readonly optional error_uri?: string
A URI identifying a human-readable web page with information about the error, used to provide the client developer with additional information about the error
realm?
⢠readonly optional realm?: string
Identifies the protection space
resource_metadata?
⢠readonly optional resource_metadata?: string
The URL of the protected resource metadata
scope?
⢠readonly optional scope?: string
The scope necessary to access the protected resource, used with insufficient_scope error code