lacewing - v2.0.1
    Preparing search index...

    Interface DecryptionProfileOptions

    interface DecryptionProfileOptions {
        audience: string;
        claimValidators?: Record<string, ValidateClaim>;
        contentEncryptionAlgorithms: readonly string[];
        issuer: string;
        key: LacewingEncryptionKey;
        keyManagementAlgorithms: readonly string[];
        maxClockSkew?: string | number;
        maxTokenAge: string | number;
        maxTokenLifetime?: string | number;
        revocation?: RevocationStore;
        subject?: string;
        typ: string;
        unsafeFailOpenOnRevocationError?: boolean;
    }
    Index
    audience claimValidators? contentEncryptionAlgorithms issuer key keyManagementAlgorithms maxClockSkew? maxTokenAge maxTokenLifetime? revocation? subject? typ unsafeFailOpenOnRevocationError?
    audience: string

    The audience value that must appear in the token.

    claimValidators?: Record<string, ValidateClaim>
    contentEncryptionAlgorithms: readonly string[]

    Explicit content-encryption (enc) allowlist.

    issuer: string

    The one issuer this profile trusts.

    key: LacewingEncryptionKey

    The private/secret key that decrypts (bound to one key-management alg).

    keyManagementAlgorithms: readonly string[]

    Explicit key-management (alg) allowlist - the header never decides.

    maxClockSkew?: string | number

    Allowed clock skew, default 5s, capped at 120s.

    maxTokenAge: string | number

    Maximum accepted token age (now - iat), independent of exp.

    maxTokenLifetime?: string | number

    Optional cap on the token's declared lifetime (exp - iat).

    revocation?: RevocationStore
    subject?: string
    typ: string

    Expected token type, e.g. "at+jwt".

    unsafeFailOpenOnRevocationError?: boolean

    Settings
    Member Visibility

    On This Page
    Properties