Skip to main content

Class: OAuthClient

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:14

A registered OAuth client (RFC 7591 dynamic client registration).

The RFC's registered fields get their own columns so they can be queried and indexed; any additional metadata a client submits is kept verbatim in metadata, because OAuthClientMetadata is an open shape.

Extends​

  • Model

Constructors​

Constructor​

new OAuthClient(values?, options?): OAuthClient

Defined in: node_modules/.pnpm/sequelize-typescript@2.1.6_@types+node@26.1.1_@types+validator@13.15.10_reflect-metadat_4b56ff65ccbbb483836c71bec8c3693e/node_modules/sequelize-typescript/dist/model/model/model.d.ts:21

Parameters​

ParameterType
values?Optional<any, string>
options?BuildOptions

Returns​

OAuthClient

Inherited from​

Model.constructor

Properties​

clientId​

clientId: string

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:21

The client_id issued by the authorization server.

clientIdIssuedAt​

clientIdIssuedAt: number | null

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:84

Unix timestamp (seconds) when the client was registered.

clientName​

clientName: string | null

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:42

Human-readable client name shown on consent screens.

clientSecretHash​

clientSecretHash: string | null

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:35

SHA-256 hash (hex) of the client secret for confidential clients, null for public clients (token_endpoint_auth_method: 'none').

The secret itself is never stored: the token endpoint only ever compares a presented value, so a hash is enough and a database dump yields nothing replayable.

grantTypes​

grantTypes: string[] | null

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:56

OAuth grant types the client may use.

metadata​

metadata: Record<string, unknown>

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:95

Registration metadata outside the columns above, preserved so a client's submitted document round-trips unchanged (e.g. logo_uri, client_uri).

redirectUris​

redirectUris: string[]

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:49

Exact redirect URIs registered for this client.

responseTypes​

responseTypes: string[] | null

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:63

OAuth response types the client may use.

scope​

scope: string | null

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:77

Space-separated scopes the client may request.

tokenEndpointAuthMethod​

tokenEndpointAuthMethod: string | null

Defined in: packages/auth-postgresdb/src/models/OAuthClient.ts:70

Client authentication method at the token endpoint.