This is the UserBuilder hook from @a2a-js/sdk: an async function that
receives the incoming Express request, validates its credentials (for
example a bearer token or an OIDC ID token) and resolves to the
authenticated User. Implementations should reject unauthenticated
requests by throwing (or by resolving to a user whose isAuthenticated is
false), which prevents the underlying agent and its tools from being
invoked by anonymous callers.
A request authenticator for the A2A surface.
This is the
UserBuilderhook from@a2a-js/sdk: an async function that receives the incoming Express request, validates its credentials (for example a bearer token or an OIDC ID token) and resolves to the authenticatedUser. Implementations should reject unauthenticated requests by throwing (or by resolving to a user whoseisAuthenticatedisfalse), which prevents the underlying agent and its tools from being invoked by anonymous callers.