JWTClaimVerificationOptions

Expected JWT "aud" (Audience) Claim value(s).

Expected clock tolerance

• In seconds when number (e.g. 5)
• Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").

Date to use when comparing NumericDate claims, defaults to new Date().

Expected JWT "iss" (Issuer) Claim value(s).

Maximum time elapsed (in seconds) from the JWT "iat" (Issued At) Claim value.

• In seconds when number (e.g. 5)
• Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").

Array of required Claim Names that must be present in the JWT Claims Set. Default is that: if the [[JWTClaimVerificationOptions.issuer issuer option]] is set, then "iss" must be present; if the [[JWTClaimVerificationOptions.audience audience option]] is set, then "aud" must be present; if the [[JWTClaimVerificationOptions.subject subject option]] is set, then "sub" must be present; if the [[JWTClaimVerificationOptions.maxTokenAge maxTokenAge option]] is set, then "iat" must be present.

Expected JWT "sub" (Subject) Claim value.

Expected JWT "typ" (Type) Header Parameter value.