@adcp/sdk API Reference - v14.0.0-beta.6
    Preparing search index...

    Interface VerifyGovernanceAuthorizationOptions

    interface VerifyGovernanceAuthorizationOptions {
        token: unknown;
        expectedIssuer: string;
        expectedAudience: string;
        authenticatedCaller: string;
        expectedTask: string;
        payload: Record<string, unknown>;
        actualCommitment: GovernanceCommitment;
        expectedPhase?: "intent";
        jwks: JwksResolver;
        replayStore: GovernanceReplayStore;
        revocationStore?: RevocationStore;
        isJtiRevoked?: (issuer: string, jti: string) => boolean | Promise<boolean>;
        revocationResolver?: GovernanceRevocationResolver;
        now?: () => number;
        clockSkewSeconds?: number;
    }
    Index

    Properties

    token expectedIssuer expectedAudience authenticatedCaller expectedTask payload actualCommitment expectedPhase? jwks replayStore revocationStore? isJtiRevoked? revocationResolver? now? clockSkewSeconds?

    Properties

    token: unknown
    expectedIssuer: string
    expectedAudience: string
    authenticatedCaller: string
    expectedTask: string
    payload: Record<string, unknown>
    actualCommitment: GovernanceCommitment
    expectedPhase?: "intent"

    Defaults to intent, the phase accepted by a downstream service.

    jwks: JwksResolver
    replayStore: GovernanceReplayStore
    revocationStore?: RevocationStore

    Optional governance-key revocation source.

    isJtiRevoked?: (issuer: string, jti: string) => boolean | Promise<boolean>

    Optional token-level revocation check for the signed jti.

    revocationResolver?: GovernanceRevocationResolver

    Combined, freshness-bearing key and token revocation source. Required to accept intent authorizations whose lifetime exceeds 15 minutes.

    now?: () => number

    Epoch seconds; defaults to the current time.

    clockSkewSeconds?: number

    Defaults to 60 seconds.

    Settings

    Member Visibility

    On This Page

    Properties