Base configuration for authentication providers Used by both backend (JWT validation) and frontend (OAuth flows)

interface AuthProviderConfig {
    audience?: string;
    authority?: string;
    clientId?: string;
    clientSecret?: string;
    domain?: string;
    issuer?: string;
    jwksUri?: string;
    name: string;
    redirectUri?: string;
    scopes?: string[];
    tenantId?: string;
    type: string;
    [key: string]: any;
}

Hierarchy

  • AuthProviderConfig

    Indexable

    [key: string]: any

    Allow provider-specific configuration fields

    Properties

    audience?: string

    Expected audience for tokens

    authority?: string

    Authority URL for providers that use it (e.g., MSAL)

    clientId?: string

    OAuth client ID

    clientSecret?: string

    OAuth client secret (backend only, never expose to frontend)

    domain?: string

    Provider domain (e.g., 'your-domain.auth0.com')

    issuer?: string

    Token issuer URL (must match 'iss' claim in JWT)

    jwksUri?: string

    JWKS endpoint URL for retrieving signing keys

    name: string

    Unique name identifier for this provider instance

    redirectUri?: string

    OAuth redirect URI for callback after authentication

    scopes?: string[]

    OAuth scopes to request

    tenantId?: string

    Tenant ID for multi-tenant providers (e.g., Azure AD)

    type: string

    Type of authentication provider (e.g., 'msal', 'auth0', 'okta')