Function: processAuthorizationCodeOpenIDResponse

💗 Help the project

▸ processAuthorizationCodeOpenIDResponse(as, client, response, expectedNonce?, maxAge?, options?): Promise<OpenIDTokenEndpointResponse | OAuth2Error>

(OpenID Connect only) Validates Authorization Code Grant Response instance to be one coming from the as.token_endpoint.

see RFC 6749 - The OAuth 2.0 Authorization Framework

see OpenID Connect Core 1.0

Parameters

Name	Type	Description
`as`	`AuthorizationServer`	Authorization Server Metadata.
`client`	`Client`	Client Metadata.
`response`	`Response`	Resolved value from authorizationCodeGrantRequest.
`expectedNonce?`	`string` \| typeof `expectNoNonce`	Expected ID Token `nonce` claim value. Default is expectNoNonce.
`maxAge?`	`number` \| typeof `skipAuthTimeCheck`	ID Token `auth_time` claim value will be checked to be present and conform to the `maxAge` value. Use of this option is required if you sent a `max_age` parameter in an authorization request. Default is `client.default_max_age` and falls back to skipAuthTimeCheck.
`options?`	`HttpRequestOptions`	-

Returns

Promise<OpenIDTokenEndpointResponse | OAuth2Error>

Resolves with an object representing the parsed successful response, or an object representing an OAuth 2.0 protocol style error. Use isOAuth2Error to determine if an OAuth 2.0 error was returned.