Skip to content
StoryShelf

ShelfOAuthProvider

Defined in: packages/auth/src/engine.ts:77

One OAuth/OIDC login method (Keycloak preset or explicit endpoints).

Properties

Section titled “Properties”

authorizationUrl?

Section titled “authorizationUrl?”

optional authorizationUrl?: string

Defined in: packages/auth/src/engine.ts:89

Explicit endpoint overrides (skip discovery for these).

clientId

Section titled “clientId”

clientId: string

Defined in: packages/auth/src/engine.ts:83

OAuth client ID registered with the provider.

clientSecret?

Section titled “clientSecret?”

optional clientSecret?: string

Defined in: packages/auth/src/engine.ts:85

OAuth client secret (omit for public clients).

discoveryUrl?

Section titled “discoveryUrl?”

optional discoveryUrl?: string

Defined in: packages/auth/src/engine.ts:87

OIDC discovery URL; prefer over explicit endpoints when available.

id

Section titled “id”

id: string

Defined in: packages/auth/src/engine.ts:79

Stable id used in routes and descriptors (e.g. “keycloak”).

label

Section titled “label”

label: string

Defined in: packages/auth/src/engine.ts:81

Human label rendered on the login button.

scopes?

Section titled “scopes?”

optional scopes?: string[]

Defined in: packages/auth/src/engine.ts:95

OAuth scopes. Defaults to ["openid", "email", "profile"].

tokenUrl?

Section titled “tokenUrl?”

optional tokenUrl?: string

Defined in: packages/auth/src/engine.ts:91

Explicit endpoint overrides (skip discovery for these).

userInfoUrl?

Section titled “userInfoUrl?”

optional userInfoUrl?: string

Defined in: packages/auth/src/engine.ts:93

Explicit endpoint overrides (skip discovery for these).