Interface: ServiceJwtPayload

Defined in: auth-shared/src/jwt/claims.ts:100

Machine-to-machine service token. Issued by POST /oauth/token (OAuth2 client_credentials grant — RFC 6749 §4.4). Carries token_type: 'service' and the m2m_clients row identity in client_id / service_name / scopes. All user-shaped fields (uid, email, roles, permissions) are absent or zero values.

Extends

BaseJwtClaims

Properties

aud?

optional aud?: string | string[]

Defined in: auth-shared/src/jwt/claims.ts:20

Inherited from

BaseJwtClaims.aud

client_id

client_id: string

Defined in: auth-shared/src/jwt/claims.ts:104

Operator-chosen identifier (e.g. “rm-prod-abc123”).

exp?

optional exp?: number

Defined in: auth-shared/src/jwt/claims.ts:21

Inherited from

BaseJwtClaims.exp

iat?

optional iat?: number

Defined in: auth-shared/src/jwt/claims.ts:22

Inherited from

BaseJwtClaims.iat

iss?

optional iss?: string

Defined in: auth-shared/src/jwt/claims.ts:19

Inherited from

BaseJwtClaims.iss

jti?

optional jti?: string

Defined in: auth-shared/src/jwt/claims.ts:24

Inherited from

BaseJwtClaims.jti

nbf?

optional nbf?: number

Defined in: auth-shared/src/jwt/claims.ts:23

Inherited from

BaseJwtClaims.nbf

scopes

scopes: string[]

Defined in: auth-shared/src/jwt/claims.ts:109

Granted scope slice (intersection of client’s configured scopes and any scope parameter on the grant request).

service_name?

optional service_name?: string

Defined in: auth-shared/src/jwt/claims.ts:106

Optional friendly label.

sub?

optional sub?: string

Defined in: auth-shared/src/jwt/claims.ts:18

Inherited from

BaseJwtClaims.sub

token_type

token_type: "service"

Defined in: auth-shared/src/jwt/claims.ts:101