Optionalaudience?: stringDefault API audience the access tokens issued for this client should be
bound to. Forwarded to /authorize and to the /oauth/token POST bodies
(code exchange, refresh, OTP). signInWith* methods accept an audience
argument to override it per call.
OptionalauthorizationParams?: AuthorizationParamsRequired. Application client ID from the dashboard.
OptionalcookieDomain?: stringOptionalcookieOptions?: CookieOptions(Optional) Overrides for the cookie storage attributes. Setting this also
implicitly switches to the cookie adapter, so passing storage: 'cookie'
is not required when you only want to tweak attributes.
Required. Your Faable Auth tenant domain.
OptionalflowType?: AuthFlowTypeOAuth flow used when initiating sign-in. Defaults to 'pkce' in browsers and 'implicit' elsewhere.
Optional Experimentallock?: LockFuncProvide your own locking mechanism based on the environment. By default no locking is done at this time.
OptionalredirectUri?: stringDefault callback URL. Falls back to window.location.origin.
Optionalscope?: stringSpace-separated scopes. Defaults to openid profile email.
Optionalstorage?: SupportedStorage | "cookie" | "localStorage"Where to keep the session. Pass 'localStorage' (default) or 'cookie'
for the bundled adapters, or any custom SupportedStorage implementation.
The cookie adapter ships with sane defaults (Path=/, SameSite=Lax,
auto Secure on HTTPS, 30-day Max-Age); use cookieOptions to override.
OptionalstorageKey?: stringOptional prefix for the storage key. Final key is ${storageKey}-${clientId}.
OptionaluseRefreshTokens?: boolean
Configuration accepted by createClient and the
FaableAuthClientconstructor.domainandclientIdare the only required fields. Everything else has sensible defaults — see the individual properties for the specifics.