lacewing - v2.0.1
    Preparing search index...

    Interface ExpectedJwtProfile

    The security boundary for verification (RFC 8725 §3.12). Built by defineProfile - the only argument shape jwtVerify accepts.

    interface ExpectedJwtProfile {
        alg: readonly AlgorithmInfo<string>[];
        aud: string;
        claimValidators?: Record<string, ValidateClaim>;
        iss: string;
        keys: LacewingKey<string> | KeySource;
        maxClockSkew: DurationSeconds;
        maxTokenAge: DurationSeconds;
        maxTokenLifetime?: DurationSeconds;
        revocation?: RevocationStore;
        subject?: string;
        typ: string;
        unsafeFailOpenOnRevocationError?: boolean;
    }
    Index
    alg aud claimValidators? iss keys maxClockSkew maxTokenAge maxTokenLifetime? revocation? subject? typ unsafeFailOpenOnRevocationError?
    alg: readonly AlgorithmInfo<string>[]

    The algorithm allowlist, resolved to Lacewing's own descriptors.

    aud: string
    claimValidators?: Record<string, ValidateClaim>
    iss: string
    keys: LacewingKey<string> | KeySource
    maxClockSkew: DurationSeconds
    maxTokenAge: DurationSeconds
    maxTokenLifetime?: DurationSeconds

    Optional cap on the token's declared span (exp - iat).

    revocation?: RevocationStore
    subject?: string
    typ: string
    unsafeFailOpenOnRevocationError?: boolean

    Deliberately ugly escape hatch: when the revocation store errors, accept the token anyway instead of failing closed (LW-rev.4).

    Settings
    Member Visibility

    On This Page
    Properties