TTMSMCPValidateAccessTokenEvent Event Type

Asks the application to check one bearer access token and report what it grants.

API unit family: TMS.MCP.Auth

Remarks

The handler decides the outcome; there is no built-in token check to fall back on. It runs before the request is dispatched and blocks it, so keep it fast - a slow lookup here delays every call. It may be entered from more than one connection at a time, so it must be safe to run concurrently. A handler must be assigned whenever bearer authentication is required; starting a channel that requires it without one raises.

Parameters

Name	Description
Sender	Channel that received the request.
AToken	Token as presented by the client, with the Bearer prefix already stripped and trimmed. Never empty: a request with no token is rejected before the handler is called.
AResourceURI	Canonical identifier of the endpoint the token was presented to. The handler should check that the token was actually issued for this audience, so that a token minted for another service cannot be replayed here.
AValidation	Outcome to fill in. Passed in cleared, so doing nothing denies the request.