Skip to main content

Class: OAuthConsent

Defined in: packages/auth-postgresdb/src/models/OAuthConsent.ts:16

A single-use consent handoff, correlated by the PKCE code_challenge.

This is the record an external consent screen writes on approval so the restarted /authorize request can be approved without asking again — it is not a durable "user X trusts client Y" grant, which is an app-level authorization decision and belongs in the app's own schema.

Extends

  • Model

Constructors

Constructor

new OAuthConsent(values?, options?): OAuthConsent

Defined in: node_modules/.pnpm/sequelize-typescript@2.1.6_@types+node@26.1.1_@types+validator@13.15.10_reflect-metadat_4b56ff65ccbbb483836c71bec8c3693e/node_modules/sequelize-typescript/dist/model/model/model.d.ts:21

Parameters

ParameterType
values?Optional<any, string>
options?BuildOptions

Returns

OAuthConsent

Inherited from

Model.constructor

Properties

codeChallenge

codeChallenge: string

Defined in: packages/auth-postgresdb/src/models/OAuthConsent.ts:23

The PKCE code_challenge the consent was recorded against.


expiresAt

expiresAt: Date

Defined in: packages/auth-postgresdb/src/models/OAuthConsent.ts:44

Instant after which the consent is no longer usable.


scopes

scopes: string[]

Defined in: packages/auth-postgresdb/src/models/OAuthConsent.ts:37

The scopes the user approved.


subject

subject: string

Defined in: packages/auth-postgresdb/src/models/OAuthConsent.ts:30

The authenticated end-user subject identifier.