Type Alias CognitoSessionRefusal

Type Declaration

• { reason: "invalid-token" }
• { identityProvider: string; reason: "single-sign-on" }

  The address's domain signs in through this IdP, and the login didn't.

• { reason: "identity-provider-mismatch" }

  A tenant IdP asserted an address outside its own domains.

• { reason: "invite-mismatch" }

  The invitation is for another address, or isn't pending.

• { reason: "not-staff" }

  A cfx-admin login that is no ACTIVE cfx.to admin user holding user-shadow:r.