Class Nexus\Mcp\Extension\Auth\Enterprise\IdentityAssertionGrant

`final`
`readonly`
`implements`	`GrantStrategyInterface`

The enterprise-managed authorization grant (SEP-990), a two-legged token exchange with no user redirect.

Located at Extension/Auth/Enterprise/IdentityAssertionGrant.php

Methods


					
	public

__construct(
	non-empty-string $idpTokenEndpoint,
	IdentityAssertionProviderInterface $assertions,
	null|non-empty-string $idpClientId = null,
	bool $allowInsecureLoopback = false,
)

Parameters

$allowInsecureLoopback

Admits an IdP reached over cleartext HTTP on a loopback host, which the spec does not exempt. For local development and conformance runs, never production


					
	public

grant(GrantContext $context, Cancellation $cancellation): AccessToken

Obtains a fresh access token for the resource the context describes.

Implements

Nexus\Mcp\Client\Auth\GrantStrategyInterface::grant()


					
	public

renewsByFreshGrant(): bool

Whether an expired token that carries no refresh token is renewed by running the grant again.

Implements

Nexus\Mcp\Client\Auth\GrantStrategyInterface::renewsByFreshGrant()

Namespaces

Classes

Interfaces

Enums

Class Nexus\Mcp\Extension\Auth\Enterprise\IdentityAssertionGrant

Parameters

Implements

Implements