Connectum API Reference / @connectum/auth / InternalAuthInterceptorOptions

Interface: InternalAuthInterceptorOptions

Defined in: packages/auth/src/types.ts:349

Options for createInternalAuthInterceptor.

Properties

internalMethods

readonly internalMethods: readonly string[]

Defined in: packages/auth/src/types.ts:367

Method patterns that are internal (service-to-service). Typically the output of getInternalMethods(services). The interceptor enforces the trust marker only on these methods; all other methods pass through unchanged (no-op).

Patterns: "Service/Method", "Service/*", or "*".

---

trustSource

readonly trustSource: InternalTrustSource

Defined in: packages/auth/src/types.ts:358

The trust source that authorizes an internal call.

Use one of the provided factories — meshIdentityTrust (production default, per-service via the mesh), signedTokenTrust (non-mesh, per-service JWT/JWKS with mandatory issuer-bound key selection), or sharedSecretTrust (dev-only fallback) — or supply a custom one.