---
editLink: false
lastUpdated: false
---

[@salesforce/b2c-tooling-sdk](../../modules.md) / [auth](../index.md) / AuthSessionFlow

# Type Alias: AuthSessionFlow

> **AuthSessionFlow** = `"pkce"` \| `"implicit"` \| `"client-credentials"`

Defined in: [packages/b2c-tooling-sdk/src/auth/session-store.ts:46](https://github.com/SalesforceCommerceCloud/b2c-developer-tooling/blob/2feab01f654eec77c6d702777ec2818472f131f1/packages/b2c-tooling-sdk/src/auth/session-store.ts#L46)

The auth flow that produced a stored session.

- `pkce`: Authorization Code + PKCE; has refresh tokens.
- `implicit`: legacy implicit grant; no refresh token.
- `client-credentials`: non-interactive `auth client`; no refresh, no
  stored secret. When the access token expires, the user re-runs
  `auth client --client-id <id> --client-secret <secret>`.