@salesforce/b2c-tooling-sdk / auth / AuthSession

Interface: AuthSession

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:48

Properties

accessToken

accessToken: string

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:59

---

accountManagerHost?

optional accountManagerHost: string | null

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:69

Account Manager host the session was minted against.

---

clientId

clientId: string

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:49

---

expiresAt?

optional expiresAt: string | null

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:65

ISO timestamp of access-token expiry (informational; JWT exp is authoritative).

---

flow

flow: AuthSessionFlow

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:51

Which flow produced this session (informational; controls refresh policy).

---

lastUsedAt?

optional lastUsedAt: string | null

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:71

ISO timestamp of the most recent write.

---

pkceUnsupported?

optional pkceUnsupported: boolean

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:58

Whether this implicit session was created after Account Manager rejected Authorization Code + PKCE for the client. The user-auth fallback uses this marker, together with accountManagerHost, to avoid repeating a PKCE flow that cannot succeed on later process or extension activations.

---

refreshToken?

optional refreshToken: string | null

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:61

Only set for PKCE. Implicit and client-credentials never have a refresh token.

---

scopes?

optional scopes: string[]

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:67

Scopes recorded with the access token.

---

sub?

optional sub: string | null

Defined in: packages/b2c-tooling-sdk/src/auth/session-store.ts:63

JWT sub claim, when available. Recorded for diagnostics.