Interface DecodedToken

the audience - who should be consuming this token this should always be https://api.ordercloud.io (the ordercloud api)

the client id used when making token request

expiration of the token (in seconds) since the UNIX epoch (January 1, 1970 00:00:00 UTC)

the issuer of the token - should always be https://auth.ordercloud.io

point at which token was issued (in seconds) since the UNIX epoch (January 1, 1970 00:00:00 UTC)

the order id assigned to the anonymous user, this value will only exist for anonymous users

list of security profile roles that this user has access to. This may include OrderCloud roles or custom roles. read more about security profile roles here

the ordercloud username

helpful for identifying user types in an app that may have more than one