namespace PartnerBLL.Auth;

// Claim names read by Entitlement's "PartnerM2MJwtBearer" scheme when reconstructing the calling
// partner's identity server-side — never accept these values from the request body/headers, only
// from HttpContext.User.Claims after JWT middleware has verified the signature. Mirrors
// DXPClaimTypes/ClientJwtClaimTypes' identical convention.
public static class PartnerM2MClaimTypes
{
    public const string PartnerId        = "partner_id";
    public const string PartnerProductId = "partner_product_id";
    public const string ApiKeyId         = "api_key_id";
    public const string Scopes           = "scopes";
}