Member Junction
    Preparing search index...

    Describes constraints an auth provider places on the session.

    Most providers (MSAL/Auth0/Okta) impose no constraints and return null from GetSessionScope(). Constrained providers (e.g. magic-link) can lock the session to a single application so the host UI hides app-switching chrome and keeps the user within their scoped app. This is a UI-confinement signal — data access is still enforced server-side by the user's role/permissions.

    interface SessionScope {
        magicLink?: boolean;
        restrictedToApplicationId?: string;
    }
    Index

    Properties

    magicLink?: boolean

    True when this is a passwordless magic-link session.

    restrictedToApplicationId?: string

    When set, the session is locked to this single Application (by ID).