Client ID of the application
Type of credential
Entity that issued the token, represented as a full host
Optional familyFamily ID identifier, usually only used for refresh tokens
Identifier for the user in their home tenant
Optional keyKeyId for PoP and SSH tokens stored in the kid claim
Timestamp when the entry was last updated
Optional realm?: stringFull tenant or organizational identifier that the account belongs to
Optional requestedMatches the SHA 256 hash of the claims object included in the token request
Actual credential as a string
Optional target?: stringPermissions that are included in the token, or for refresh tokens, the resource identifier.
Optional tokenMatches the authentication scheme for which the token was issued (i.e. Bearer or pop)
Optional userMatches the SHA 256 hash of the obo_assertion for the OBO flow
Generated using TypeDoc
Credential Cache Type