Connectum API Reference / @connectum/auth / InternalAuthInterceptorOptions
Interface: InternalAuthInterceptorOptions
Defined in: packages/auth/src/types.ts:341
Options for createInternalAuthInterceptor.
Properties
internalMethods
readonlyinternalMethods: readonlystring[]
Defined in: packages/auth/src/types.ts:359
Method patterns that are internal (service-to-service). Typically the output of getInternalMethods(services). The interceptor enforces the trust marker only on these methods; all other methods pass through unchanged (no-op).
Patterns: "Service/Method", "Service/*", or "*".
trustSource
readonlytrustSource:InternalTrustSource
Defined in: packages/auth/src/types.ts:350
The trust source that authorizes an internal call.
Use one of the provided factories — meshIdentityTrust (production default, per-service via the mesh), signedTokenTrust (non-mesh, per-service JWT/JWKS with mandatory issuer-bound key selection), or sharedSecretTrust (dev-only fallback) — or supply a custom one.
