CredentialRefreshFallbackReason

1
type CredentialRefreshFallbackReason =
2
  | "no-scope"
3
  | "no-dpop-support"
4
  | "endpoint-failed"
5
  | "activation-timeout"
6
  | (string & {})

Diagnostic detail for CredentialRefreshFallbackWarning.

Stable values, but treat unknown strings as “fell back for an unspecified cause” — do not branch on this value for control flow. New values may be added in future releases.

• 'no-scope' – The minted SAT lacks sat:refresh scope
• 'no-dpop-support' – The platform does not support DPoP key binding
• 'endpoint-failed' – The /devices/token exchange failed transiently (see DeviceTokenError)
• 'activation-timeout' – Device-token activation did not resolve in time