Function completeAuthorization

completeAuthorization(
    config: AuthConfig,
    pending: Pick<PendingAuthorization, "state" | "nonce" | "codeVerifier">,
    callbackUrl: string,
    fetchFn?: {
        (input: URL | RequestInfo, init?: RequestInit): Promise<Response>;
        (input: string | URL | Request, init?: RequestInit): Promise<Response>;
        (input: string | URL | Request, init?: RequestInit): Promise<Response>;
    },
    nowEpochSeconds?: () => number,
): Promise<TokenSet>
Complete a login: validate the callback against the stored PendingAuthorization, exchange the code at the token endpoint, and validate the returned id_token's binding claims (issuer, audience, expiry, nonce, subject).
Parameters
- config: AuthConfig
  The same config used for beginAuthorization.
- pending: Pick<PendingAuthorization, "state" | "nonce" | "codeVerifier">
  The state/nonce/codeVerifier persisted at login start.
- callbackUrl: string
  The full redirect URL the issuer returned to.
- fetchFn: {
      (input: URL | RequestInfo, init?: RequestInit): Promise<Response>;
      (input: string | URL | Request, init?: RequestInit): Promise<Response>;
      (input: string | URL | Request, init?: RequestInit): Promise<Response>;
  } = fetch
  Injectable fetch (defaults to the global).
  - (input: URL | RequestInfo, init?: RequestInit): Promise<Response>
    
    MDN Reference
    
    Parameters
    
    input: URL | RequestInfo
    
    Optionalinit: RequestInit
    
    Returns Promise<Response>
    
    (input: string | URL | Request, init?: RequestInit): Promise<Response>
    
    MDN Reference
    
    Parameters
    
    input: string | URL | Request
    
    Optionalinit: RequestInit
    
    Returns Promise<Response>
    
    (input: string | URL | Request, init?: RequestInit): Promise<Response>
    
    MDN Reference
    
    Parameters
    
    input: string | URL | Request
    
    Optionalinit: RequestInit
    
    Returns Promise<Response>
- nowEpochSeconds: () => number = ...
  Injectable clock in epoch seconds (for tests).
Returns Promise<TokenSet>
The validated TokenSet.

Remarks
The caller must delete the pending state from storage before calling this so a replayed callback can never reuse the verifier (PKCE single-use, docs/24-sdk-design.md D3). Most integrations should use createUpbond instead.

Throws
AuthError on issuer error, missing/invalid callback, state mismatch, a failed token request, or id_token validation failure.

Function completeAuthorization

Parameters

Parameters

Returns Promise<Response>

Parameters

Returns Promise<Response>

Parameters

Returns Promise<Response>

Returns Promise<TokenSet>

Remarks

Throws

Settings