Event Object

Learn about the credentials-exchange Action trigger’s event object, which provides contextual information about the trigger execution.

The event object for the credentials-exchange Actions trigger provides contextual information about the trigger execution.

event.accessToken

event.accessToken · dictionary

Information about the access token to be issued.

Hide accessToken properties

customClaims · dictionary

scope · array of strings

event.client

event.client · dictionary

Information about the Client used during this token exchange.

Hide client properties

client_id · string

The client id of the application the user is logging in to.

metadata · dictionary

An object for holding other application properties.

name · string

The name of the application (as defined in the Dashboard).

event.custom_domain

event.custom_domain · dictionary · optional

Details about the custom domain associated with the current transaction.

Hide custom_domain properties

domain · string

The custom domain name.

domain_metadata · dictionary

Custom domain metadata as key-value pairs.

event.organization

event.organization · dictionary · optional

Details about the Organization associated with the current transaction.

Hide organization properties

id · string

The Organization identifier.

display_name · string

The friendly name of the Organization.

metadata · dictionary

Metadata associated with the Organization.

name · string

The name of the Organization.

event.request

event.request · dictionary

Details about the request that initiated the transaction.

Hide request properties

body · dictionary

The body of the POST request. This data will only be available during refresh token, Client Credential Exchange flows and PreUserRegistration Action.

geoip · dictionary

Hide geoip properties

cityName · string · optional

continentCode · string · optional

countryCode · string · optional

countryCode3 · string · optional

countryName · string · optional

latitude · number · optional

longitude · number · optional

subdivisionCode · string · optional

subdivisionName · string · optional

timeZone · string · optional

hostname · string · optional

The hostname that is being used for the authentication flow.

ip · string

The originating IP address of the request.

language · string · optional

The language requested by the browser.

method · string

The HTTP method used for the request

user_agent · string · optional

The value of the User-Agent header received when initiating the transaction.

event.resource_server

event.resource_server · object

Information about the Resource Server that is issuing the access token.

Hide resource_server properties

identifier · string

The identifier of the resource server. For example: https://your-api.example.com.

event.secrets

event.secrets · secrets

Secret values securely associated with this Action.

event.tenant

event.tenant · object

Information about the Tenant used during this token exchange.

Hide tenant properties

id · string

The name of the tenant.

event.transaction

event.transaction · object

Information about the Credentials Exchange transaction.

Hide transaction properties

correlation_id · string · optional

Correlation ID can be provided in the initial authentication request when the application redirects to Universal Login. You can use value to correlate logs and requests from your Action code with the user flow.

requested_scopes · array of strings

The scopes specified (if any) when requesting the access token.

target_scopes · array of strings · optional

[Early Access] The live target scope set for the access token. Initialized from the client grants and immediately updated by api.transaction target scope methods across current and subsequent Actions. After all Actions complete, these scopes are intersected with the client grant. Scopes not present in the grant are silently dropped from the final access token.