SsoStartResult
in package
FinalYes
The result of `ssoStart` (wire schema `OidcStartResponse`, CONTRACT.md §12.1).
There is deliberately no nonce: on the federation path the nonce never leaves the
server (§12.1 note 7). Round-trip self::$state into ssoComplete unmodified —
the server stores it single-use with a 10-minute TTL and recovers the whole login
context from it.
Table of Contents
Properties
- $authorizeUrl : string
- $expiresInSecs : int
- $state : string
Methods
- __construct() : mixed
Properties
$authorizeUrl read-only
public
string
$authorizeUrl
$expiresInSecs read-only
public
int
$expiresInSecs
$state read-only
public
string
$state
Methods
__construct()
public
__construct(string $authorizeUrl, string $state, int $expiresInSecs) : mixed
Parameters
- $authorizeUrl : string
-
The upstream IdP authorization URL to redirect the browser to.
- $state : string
-
Single-use CSRF state to round-trip back into
ssoCompleteunmodified. - $expiresInSecs : int
-
Remaining TTL of the server-side state row, in seconds (600 = 10 min).