Jwt
Table of Contents
Interfaces
- JtiDenyList
- Deny-list for the JWT `jti` claim.
Classes
- AccessTokenValidator
- Single place that decides whether an access token is still usable: signature and expiration ({@see JwtManager}) plus the `jti` deny-list ({@see JtiDenyList}).
- CapabilityTokenIssuer
- Issues a per-request internal token carrying a capability and hands it to {@see ApiBridge::setInternalAuthToken()}.
- DbJtiDenyList
- DB-backed deny-list, a fallback for hosting without Redis.
- JtiDenyListFactory
- Picks the `JtiDenyList` implementation by the `%useRedis%` flag in `jwt.neon`.
- JwtCapability
- One capability carried in a JWT access token: proof of access to a single record.
- JwtGuardConfig
- JwtManager
- JwtPayload
- JwtRefreshConfig
- RedisJtiDenyList
- Redis-backed deny-list.