Expand description
Bearer auth and User Signup.
Client-side bearer auth: requesting, caching, and presenting the
BearerAuthTokens used to authenticate against Lexe-run services.
A BearerAuthenticator holds the credential a client authenticates with and
hands out fresh tokens on demand, scoped by LexeScope:
Ephemeralholds a user key pair and mints a fresh, short-lived token whenever one is needed, caching the latest token per scope so repeated calls are cheap.Staticholds a single pre-minted, long-lived token of a fixed scope (e.g. a client credential’sGatewayProxytoken); it can serve any request whose scope it covers, but cannot mint new tokens.
Modules§
- helpers
- Bearer auth helpers.
Enums§
- Bearer
Authenticator - Hands out fresh
BearerAuthTokens for a givenLexeScope, caching them until they expire. See the module docs for the two variants.
Constants§
- DEFAULT_
USER_ TOKEN_ LIFETIME_ SECS - LONG_
LIVED_ GATEWAY_ PROXY_ TOKEN_ LIFETIME_ SECS - Lifetime of the long-lived
LexeScope::GatewayProxytoken.