Function: verifyClientSecret()
verifyClientSecret(
args):boolean
Defined in: oauth.ts:107
Verifies a presented client_secret against a stored SHA-256 hash in
constant time.
Returns false for an absent or empty presented secret, so a confidential
client can never authenticate by omitting the credential.
Parameters
| Parameter | Type | Description |
|---|---|---|
args | { clientSecret: string | undefined; clientSecretHash: string; } | - |
args.clientSecret | string | undefined | The secret presented at the token endpoint. |
args.clientSecretHash | string | The stored SHA-256 hex hash to compare against. |
Returns
boolean