AuthToken

A minted access token and when it expires, returned by IAuthTokenGenerator.Generate.

ExpiresAt is returned so a client can refresh proactively rather than waiting for a 401. It is the same value as the token's exp claim, exposed so the caller does not have to decode the token to read it.

Fields

Token: string
The encoded JWT to return to the client.

ExpiresAt: DateTimeOffset
The absolute expiry, in UTC.

Type signature

public sealed record AuthToken
{
    public required string Token { get; init; }
    public required DateTimeOffset ExpiresAt { get; init; }
}