Interface BearerAuthOptions

Options for creating the bearer auth middleware.

interface BearerAuthOptions {
    provider: AuthProvider;
    requiredScopes?: readonly string[];
    resourceMetadataUrl?: string;
}

Properties

Authentication provider (full OAuth or token verifier)

requiredScopes?: readonly string[]

Required OAuth scopes for all requests through this middleware. Requests without ALL listed scopes are rejected with 403.

resourceMetadataUrl?: string

Protected Resource Metadata URL (RFC 9728). Included in WWW-Authenticate headers for 401 responses.