Skip to content

CreateClientSessionInput

Input for minting a short-lived, per-user client-session token.

The customer backend attests the end user, then mints a browser-safe token scoped to exactly that subject. The tenant is derived server-side from the server key (RevTurbineServerOptions.apiKey) — never from this input.

optional capabilities?: string[]

Client-facing capabilities the token is scoped to. Defaults to ['context:read'] (fetch the user’s client-safe context).


subject: string

The end-user subject the token is minted for (opaque to RevTurbine).


optional surface?: string

Optional surface / session scope hint (e.g. a page or feature area).