stepupRefreshJwt property
Used to add layered security to your app by implementing Step-up authentication.
final session = Descope.sessionManager.session;
if (session == null) {
throw Exception('User is not logged in');
}
final options = SignInOptions(stepupRefreshJwt: session.refreshJwt);
final future = Descope.otp.signIn(method: DeliveryMethod.email, loginId: email, options: options);
After the Step-up authentication completes successfully the returned session JWT will
have an su
claim with a value of true
.
Note: The su
claim is not set on the refresh JWT.
Implementation
final String? stepupRefreshJwt;