@hyper.authio/server 0.10.0 → 0.10.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -73,8 +73,8 @@ const verifier = createAuthioVerifier({
73
73
  Nothing tells a lightweight token apart from a full one that carries no role (a person without roles has no
74
74
  `*_resource_access` either), so the verifier never guesses: the mode decides. The introspection answer is cached per
75
75
  `jti` for `introspectionCacheDuration`, so `activeCheck` asks Authio once per token and cache period. The answer only
76
- adds claims: one the token carries keeps the token's value, which its signature vouches for (Authio answers a single
77
- `aud`, and `client_id` for `azp`).
76
+ adds claims: one the token carries keeps the token's value, which its signature vouches for, whatever the answer says
77
+ (it names `client_id` for `azp`).
78
78
 
79
79
  ### Protected resource metadata (RFC 9728)
80
80