ReadonlyaccessThe access token.
Optional ReadonlyexpiresLifetime in seconds, as the provider reported it.
Optional ReadonlyidThe ID token; present for an oidc provider, absent for oauth2.
Optional ReadonlyrefreshThe refresh token, when issued.
Optional ReadonlyscopeThe scope the provider actually granted.
Optional ReadonlytokenThe provider's token type, usually Bearer.
The tokens a provider returned from its token endpoint.
Handed to
SignInProviderBase.onTokensand stored nowhere else: an access token can run to kilobytes, and past the session cookie's 4096-byte budget the session plugin throws at commit, which would break the sign-in rather than the feature that wanted the token.Since
0.8.0