Interface ClaimsPolicy

The claim-checking slice shared by the verify (JWS) and decrypt (JWE) paths. Both ExpectedJwtProfile and ExpectedDecryptionProfile satisfy it, so one claims engine serves both.

interface ClaimsPolicy {
    aud: string;
    claimValidators?: Record<string, ValidateClaim>;
    iss: string;
    maxClockSkew: DurationSeconds;
    maxTokenAge: DurationSeconds;
    maxTokenLifetime?: DurationSeconds;
    subject?: string;
}

Hierarchy (View Summary)

ClaimsPolicy
- ExpectedDecryptionProfile

Index

Properties

aud claimValidators? iss maxClockSkew maxTokenAge maxTokenLifetime? subject?

Properties

aud

aud: string

`Optional`claimValidators

claimValidators?: Record<string, ValidateClaim>

iss

iss: string

maxClockSkew

maxClockSkew: DurationSeconds

maxTokenAge

maxTokenAge: DurationSeconds

`Optional`maxTokenLifetime

maxTokenLifetime?: DurationSeconds

Optional cap on the token's declared span (exp - iat).

`Optional`subject

subject?: string