Skip to content

ClientTypeResolver

The default ClientTypeResolverInterface: applies the RFC 9068 rule — service when the token’s sub equals its client_id/azp (the authority mints machine/client-credentials tokens this way), otherwise user.

An app wanting different logic replaces this service (registered by JwtAuthPlugin) rather than toggling a framework flag.

final class ClientTypeResolver implements ClientTypeResolverInterface

ImplementsClientTypeResolverInterface
Since1.0.0
SourceClientTypeResolver.php
MethodDescription
resolve(array<string, mixed> $claims): ClientType

public function resolve(array<string, mixed> $claims): ClientType

The validated, raw claim set.

ParameterTypeDescription
$claimsarray``<``string``, ``mixed``>The validated, raw claim set.

Returns ClientTypeClientType::Service when sub === client_id/azp, otherwise ClientType::User.