Auth
Table of Contents
Interfaces
- JtiStore
- CONTRACT.md §21.7.2 check 8 — single-use `jti` tracking for DPoP proofs.
Classes
- DeviceToken
- The result of `AxiamClient::authenticateDevice()` — the mTLS device login
(CONTRACT.md §6.1 rules 6-10, contract 1.51).
- DpopRequest
- What {@see DpopVerifier::verifyProof()} needs to know about the current request.
- DpopVerifier
- DPoP proof verification — CONTRACT.md §21.7.2 (RFC 9449), contract 1.16.
- InMemoryJtiStore
- A {@see JtiStore} for a single PHP process.
- JwksVerifier
- Local EdDSA/Ed25519 JWKS verification (CONTRACT.md D-08).
- LoginResult
- Result of `AxiamClient::login()` (CONTRACT.md §1, D-09).
- PresentedProofs
- What the caller proved about **this** connection and **this** request, for
{@see JwksVerifier::verifyTokenBinding()}.
- RefreshGuard
- Shared-promise clear-on-both-paths helper (CONTRACT.md §9, D-06).
- RevocationFeed
- The optional session-revocation feed poller (CONTRACT.md §10.4, contract 1.44 — AXIAM
threats T-39 and T-143).
- RptPermission
- A UMA 2.0 permission carried by an RPT (CONTRACT.md §20) — one entry of
{@see TokenIntrospection::$permissions}.
- TokenIntrospection
- The result of `AxiamClient::introspectToken()` — the RFC 7662 set, every field of the
wire `IntrospectTokenResponse` (CONTRACT.md §1.1.1 rule 3, contract 1.51).
- TokenValidation
- The result of `AxiamClient::validateToken()` — every field of the wire
`ValidateTokenResponse` (CONTRACT.md §1.1.1 rule 3, contract 1.51).
- UserInfo
- Result of `AxiamClient::getUserInfo()` (CONTRACT.md §1.1, contract 1.3).
Traits
- TokenBindingSupport
- Shared machinery behind {@see TokenValidation::status()}/`verifyPossession()` and
{@see TokenIntrospection::status()}/`verifyPossession()` (CONTRACT.md §10.1 rule 9,
§10.3, contract 1.51).
Enums
- TokenStatus
- What a `validateToken`/`introspectToken` result means for the presenter — the three
cases CONTRACT.md §10.1 rule 9 and §10.3 distinguish (contract 1.51).