Function BuildSessionClaims

Parameters

• args: {
      anonymous?: boolean;
      applicationId: string;
      audience: string;
      email: string;
      firstName?: string;
      invitedByUserId?: string;
      inviteId: string;
      issuer: string;
      lastName?: string;
      nowSeconds: number;
      priorScopes?: readonly MagicLinkScopeEntry[];
      resourceId?: string;
      resourceType?: string;
      roleName: string;
      sessionId?: string;
      ttlSeconds: number;
  }

  • Optionalanonymous?: boolean

    True for anonymous sessions — the server enforces scope from mj_scopes, not roles.

  • applicationId: string

  • audience: string

  • email: string

  • OptionalfirstName?: string

  • OptionalinvitedByUserId?: string

  • inviteId: string

  • issuer: string

  • OptionallastName?: string

  • nowSeconds: number

  • OptionalpriorScopes?: readonly MagicLinkScopeEntry[]

    Prior session's scope union to carry forward (multi-link anonymous sessions).

  • OptionalresourceId?: string

  • OptionalresourceType?: string

    Resource-share/embed scope for this link's entry.

  • roleName: string

  • OptionalsessionId?: string

    Opaque per-session id (anonymous forensics correlation).

  • ttlSeconds: number