Passport

Set or get the default scopes.

Given scopes persist for the worker lifetime and affect every request.

Return the scopes in the given list that are actually defined scopes for the application.

Get all of the defined scope IDs.

Determine if the given scope has been defined.

Get all of the scopes defined for the application.

Get all of the scopes matching the given IDs.

Get the global scopes and any scopes belonging to the current server.

Define the scopes for the application.

The catalog persists in a static property and affects every request on the worker.

Define the resources tokens may access.

The catalog persists in a static property and affects every request on the worker.

Determine whether a resource has been defined.

Get the resources matching the given identifiers.

Get the global resources and those belonging to the current server.

Get or set how long user approval is remembered.

A given duration, including null, persists for every subsequent request on the worker.

Get or set when access tokens expire.

Cached servers retain a given lifetime across requests.

Get or set when refresh tokens expire.

Cached servers retain a given lifetime across requests.

Get or set when personal access tokens expire.

Cached servers retain a given lifetime across requests.

Get or set when client credentials grant tokens expire.

Cached servers retain a given lifetime across requests.

Get or set the maximum lifetime of proof-bound access tokens.

A given lifetime persists for every subsequent request on the worker.

Get or set the name for API token cookies.

A given name persists in a static property and affects every request on the worker.

Indicate that Passport should ignore incoming CSRF tokens.

This policy persists in a static property and affects every request on the worker.

Set the current user for the application with the given scopes.

This replaces the coroutine's authenticated user and default guard with test state.

Set the current client for the application with the given scopes.

This installs a resource-server mock and authenticated client in the coroutine's context.

Get the provider for personal access clients without an explicit provider.

Set the storage location of the encryption keys.

Cached servers retain their loaded keys for the worker lifetime.

Get the location of the encryption keys.

Set the access token entity class name.

The entity class persists in a static property and affects every issuance on the worker.

Set the consent model class name.

The model class persists in a static property and affects every request on the worker.

Get the consent model class name.

Get a new consent model instance.

Set the auth code model class name.

The model class persists in a static property and affects every request on the worker.

Get the auth code model class name.

Get a new auth code model instance.

Set the pushed authorization request model class name.

The model class persists for the worker lifetime and affects every request.

Get the pushed authorization request model class name.

Get a new pushed authorization request model instance.

Set the default ResponseType that should be used by the authorization server.

Cached servers retain this response prototype for the worker lifetime.

Set the device code model class name.

The model class persists in a static property and affects every request on the worker.

Get the device code model class name.

Get a new device code model instance.

Set the client model class name.

The model class persists in a static property and affects every request on the worker.

Get the client model class name.

Get a new client model instance.

Set the token model class name.

The model class persists in a static property and affects every request on the worker.

Get the token model class name.

Get a new access token model instance.

Set the refresh token model class name.

The model class persists in a static property and affects every request on the worker.

Get the refresh token model class name.

Get a new refresh token model instance.

Set the refresh token family model class name.

The model class persists in a static property and affects every request on the worker.

Get the refresh token family model class name.

Get a new refresh token family model instance.

Set the signing key model class name.

The model class persists in a static property and affects every request on the worker.

Get the signing key model class name.

Get a new signing key model instance.

Specify an additional access token authentication check.

The callback persists in a static property and runs for every bearer authentication.

Specify an additional client authentication check.

The callback persists in a static property and runs for every client authentication.

Authorize resource-server clients to inspect another client's access token.

The callback persists in a static property and affects every introspection request.

Specify the callback resolving protected-resource metadata for authentication challenges.

The callback persists in a static property and affects every authentication challenge on the worker.

Specify grant attributes to carry into issued tokens.

The attribute list persists in a static property and affects every issuance on the worker.

Specify the binding included in and checked against API cookies.

The callback persists in a static property and affects cookies across all requests.

Specify additional claims for issued access tokens.

The callback persists in a static property and affects every issuance on the worker.

Specify whether an access token may receive a refresh token.

The callback persists in a static property and affects every issuance on the worker.

Specify the callback that should be invoked to generate encryption keys for encrypting JWT tokens.

The callback supplies random key material that cached servers retain for the worker lifetime.

Generate an encryption key for encrypting JWT tokens.

Register the views for Passport using conventional names under the given namespace.

The response bindings persist in the worker's container and affect subsequent requests.

Register the views for Passport using conventional names under the given prefix.

The response bindings persist in the worker's container and affect subsequent requests.

Specify which view should be used as the authorization view.

The response binding persists in the worker's container and affects subsequent requests.

Specify which view should be used to select the approving account.

The response binding persists in the worker's container and affects subsequent requests.

Specify which view should be used as the device authorization view.

The response binding persists in the worker's container and affects subsequent requests.

Specify which view should be used as the device user code view.

The response binding persists in the worker's container and affects subsequent requests.

Configure Passport to not register its routes.

This changes route registration for the worker's application.

Enable the dynamic client registration endpoint.

Call during provider registration, before Passport registers routes for the worker.

Instruct Passport to enable cookie serialization.

The policy persists in a static property and affects every request on the worker.

Instruct Passport to disable cookie serialization.

The policy persists in a static property and affects every request on the worker.

Instruct Passport to enable cookie encryption.

The policy persists in a static property and affects every request on the worker.

Instruct Passport to disable cookie encryption.

The policy persists in a static property and affects every request on the worker.

Flush all static state.