tenancy/auth0

Import

Import

import * as api from "@fungi.computer/oyster/tenancy/auth0";

Exports

Kind	Export	Description
Ttype alias	Auth0Transaction	One short-lived, single-use browser authorization transaction.
Ttype alias	Auth0Session	Server-owned verified identity session; browsers receive only its random handle.
Ttype alias	Auth0BrowserOptions	Host ports for optional browser login; stored state must be shared across host instances.
Ttype alias	Auth0Options	Auth0 issuer and audience configuration; browser login is opt-in.
fnfunction	auth0()	Verify Auth0 identities; the registry alone supplies canonical membership and role.

Auth0TransactionTtype alias

Signature

type Auth0Transaction = Readonly<{
  tenantId: TenantId;
  redirectUri: string;
  state: string;
  codeVerifier: string;
  expiresAt: number;
}>;

One short-lived, single-use browser authorization transaction.

---

Auth0SessionTtype alias

Signature

type Auth0Session = Readonly<{
  tenantId: TenantId;
  identity: Identity;
  expiresAt: number;
}>;

Server-owned verified identity session; browsers receive only its random handle.

---

Auth0BrowserOptionsTtype alias

Signature

type Auth0BrowserOptions = Readonly<{
  callbackPath: string;
  resolveTenant: ReadonlyTenancy["resolve"];
  registry: Pick<ReadonlyTenantRegistry, "get" | "membershipOf">;
  transactions: Readonly<{
    put: Promise<void>;
    take: Promise<Readonly<{
      tenantId: TenantId;
      redirectUri: string;
      state: string;
      codeVerifier: string;
      expiresAt: number;
    }> | null>;
  }>;
  sessions: Readonly<{
    put: Promise<void>;
    get: Promise<Readonly<{
      tenantId: TenantId;
      identity: Identity;
      expiresAt: number;
    }> | null>;
  }>;
}>;

Host ports for optional browser login; stored state must be shared across host instances.

---

Auth0OptionsTtype alias

Signature

type Auth0Options = Readonly<{
  domain: string;
  clientId: string;
  audience: string;
  clientSecret?: string;
  fetch?: typeof globalThis.fetch;
  browser?: Auth0BrowserOptions;
}>;

Auth0 issuer and audience configuration; browser login is opt-in.

auth0()fnfunction

Signature

function auth0(options): AuthAdapter;

Verify Auth0 identities; the registry alone supplies canonical membership and role.

Parameters

Parameter	Type
options	Auth0Options

Returns

AuthAdapter