@hyper.authio/server 0.10.0 → 0.10.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.js.map +1 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -73,8 +73,8 @@ const verifier = createAuthioVerifier({
|
|
|
73
73
|
Nothing tells a lightweight token apart from a full one that carries no role (a person without roles has no
|
|
74
74
|
`*_resource_access` either), so the verifier never guesses: the mode decides. The introspection answer is cached per
|
|
75
75
|
`jti` for `introspectionCacheDuration`, so `activeCheck` asks Authio once per token and cache period. The answer only
|
|
76
|
-
adds claims: one the token carries keeps the token's value, which its signature vouches for
|
|
77
|
-
|
|
76
|
+
adds claims: one the token carries keeps the token's value, which its signature vouches for, whatever the answer says
|
|
77
|
+
(it names `client_id` for `azp`).
|
|
78
78
|
|
|
79
79
|
### Protected resource metadata (RFC 9728)
|
|
80
80
|
|