RequestingPartyToken
in package
FinalYes
The result of the UMA ticket grant (CONTRACT.md §20.1).
There is no $refreshToken property, and that is deliberate (§20.2 rule 5).
The grant issues none, so an RPT cannot outlive the ticket that authorised it; an
application that wants a fresh one re-runs the grant. This result never enters the
§9 single-flight refresh guard — there is nothing to refresh.
Table of Contents
Properties
- $accessToken : Sensitive
- $expiresIn : int
- $tokenType : string
Methods
- __construct() : mixed
Properties
$accessToken read-only
public
Sensitive
$accessToken
$expiresIn read-only
public
int
$expiresIn
$tokenType read-only
public
string
$tokenType
Methods
__construct()
public
__construct(Sensitive $accessToken, string $tokenType, int $expiresIn) : mixed
Parameters
- $accessToken : Sensitive
-
The RPT itself (§20.6 secret).
- $tokenType : string
-
Always
Bearer. - $expiresIn : int
-
min(claimToken remaining, server ceiling, 300 s).