ProAuth issues tokens after a successful login request. Tokens can be issued for users or services. The tokens can be heavily customized with a claim rule engine to perfectly match the needs of your application.
The following tokens can be issued by ProAuth:
- id_token
- Identity information about the user
- Set of rules for validating an id_token: expiration and signature section
- access_token
- Used as bearer tokens (can access authorized resources without further identification)
- Usually short lifespan (expiration)
- refresh_token
- Used to obtain new access tokens
- Usually long-lived - allows for long-lived sessions that can be killed if necessary
- Refresh tokens can be revoked by admins