Attach

The configuration for validating JWTs. Must be one of: 'jwks', 'static'

The URL of the JWKS endpoint. Required if configurationType is 'jwks'. This endpoint must serve JSON Web Key Sets (JWKS) containing the public keys used to verify JWT signatures.

The attributes that should be present in the JWT for it to be valid.

The PEM-encoded CA certificate for validating the TLS connection to the JWKS endpoint.

A list of PEM-encoded public keys used to verify JWT signatures. Required if configurationType is 'static'. Each key must be in RSA or ECDSA format and properly PEM-encoded with BEGIN/END markers.

The unique identifier of the JWT provider.

The list of intended recipients.

The expected principal that is the subject of the JWT.

The IPs or CIDR ranges that access tokens can be used from.

The lifetime for an access token in seconds.

The maximum lifetime for an access token in seconds.

The maximum number of times that an access token can be used.