lacewing - v2.0.1
    Preparing search index...

    Interface ExpectedDecryptionProfile

    The security boundary for decryption - the JWE analogue of ExpectedJwtProfile. Built by defineDecryptionProfile, the only argument shape jwtDecrypt accepts.

    interface ExpectedDecryptionProfile {
        aud: string;
        claimValidators?: Record<string, ValidateClaim>;
        contentEncryptionAlgorithms: readonly ValidAlg[];
        iss: string;
        key: LacewingEncryptionKey;
        keyManagementAlgorithms: readonly ValidAlg[];
        maxClockSkew: DurationSeconds;
        maxTokenAge: DurationSeconds;
        maxTokenLifetime?: DurationSeconds;
        revocation?: RevocationStore;
        subject?: string;
        typ: string;
        unsafeFailOpenOnRevocationError?: boolean;
    }

    Hierarchy (View Summary)

    Index
    aud claimValidators? contentEncryptionAlgorithms iss key keyManagementAlgorithms maxClockSkew maxTokenAge maxTokenLifetime? revocation? subject? typ unsafeFailOpenOnRevocationError?
    aud: string
    claimValidators?: Record<string, ValidateClaim>
    contentEncryptionAlgorithms: readonly ValidAlg[]

    Allowlist of content-encryption (enc) algorithms.

    iss: string
    key: LacewingEncryptionKey

    The private/secret key that decrypts (scoped to this profile's issuer).

    keyManagementAlgorithms: readonly ValidAlg[]

    Allowlist of key-management (alg) algorithms; the header never decides.

    maxClockSkew: DurationSeconds
    maxTokenAge: DurationSeconds
    maxTokenLifetime?: DurationSeconds

    Optional cap on the token's declared span (exp - iat).

    revocation?: RevocationStore
    subject?: string
    typ: string
    unsafeFailOpenOnRevocationError?: boolean

    Settings
    Member Visibility

    On This Page
    Properties