OptionalclientThe application's SSO client secret. Omit for a public (PKCE) client.
OptionalcallbackRedirect URI registered for the application.
OptionalstorageWhere tokens are persisted. Defaults to MemoryTokenStorage.
OptionalssoPre-built SSO client. When given, clientId, clientSecret, callbackUrl, fetch and ssoTimeoutMs are ignored for SSO calls.
OptionalfetchCustom fetch for SSO calls. Defaults to globalThis.fetch.
OptionalssoTimeout for each SSO call, in milliseconds; see
EveSsoClientConfig.timeoutMs. Unset by default. With a locking
store, keep it well below the lock's stale timeout so a hung refresh
ends before another process breaks its lock. Ignored with ssoClient.
OptionalrefreshHow long before expiry a token counts as stale, in milliseconds. Defaults to 60 000 (one minute).
OptionalautoWhen true (the default), EsiTokenManager.getToken refreshes a stale token before returning it. When false it returns the stored token as-is and refresh only happens through EsiTokenManager.refresh, EsiTokenManager.refreshAll, or the 401 path of a created client.
OptionalonCalled after a token is refreshed and persisted.
OptionalonCalled when a refresh fails for a reason other than revocation.
OptionalonCalled when SSO reports a character's refresh token as invalid.
OptionalloggerLogger for refresh activity. Defaults to the library logger, resolved at
each log call so a later global setLogger() applies.
OptionalverifyVerify the RS256 signature of access tokens against EVE SSO's published
key set (JWKS) in EsiTokenManager.addCharacter and
EsiTokenManager.importToken, and check their iss, aud and
exp claims. Turn this on when tokens can reach the manager from
anywhere but SSO's token endpoint. Defaults to false. Keys are fetched
with fetch and cached.
OptionalnowClock override for tests.
The application's SSO client id.