Configuration for AgentDelegationCredentialProvider.
clientId:
string
Registered confidential Agent Runtime client id.
clientSecret:
string
Registered confidential Agent Runtime client secret. Never logged or persisted by the provider.
optionalconstraints?:AgentDelegationConstraints
Optional narrowing constraints.
optionalexchangeTimeoutMs?:number
Maximum token-exchange duration in milliseconds. Defaults to 30000.
optionalexpirySkewSeconds?:number
Refresh skew applied to the in-memory token cache. Defaults to 30 seconds.
optionalfetch?: (input,init?) =>Promise<Response>
Optional fetch implementation for controlled runtimes and tests.
string | URL | Request
RequestInit
Promise<Response>
resource:
string
Exact QVeris resource/audience for the delegated token.
scopes: readonly
string[]
Maximum scope set that may be requested by this provider.
subjectCredentialProvider:
CredentialProvider
Supplies the user's OAuth access token used as the RFC 8693 subject token.
tokenEndpoint:
string
Exact published OAuth token endpoint, for example https://qveris.ai/api/v1/oauth/token.
Was this page helpful?
