docs/jwt/verify/interfaces/JWTVerifyOptions.md
Support from the community to continue maintaining and improving this module is welcome. If you find the module useful, please consider supporting the project by becoming a sponsor.
JWS verification and JWT Claims Set validation options.
ā¢ optional algorithms?: string[]
Accepted JWS "alg" (Algorithm) Header Parameter values. Defaults to all algorithms applicable
to the key or secret. Unsecured JWTs (alg: "none") are never accepted.
ā¢ optional audience?: string | string[]
Expected JWT "aud" (Audience) Claim value(s). Requires the claim to be present.
ā¢ optional clockTolerance?: string | number
Clock skew tolerance in seconds or a duration string (e.g. "5 seconds"). Applies to the "nbf" (Not Before) and "exp" (Expiration Time) claims, and to "iat" (Issued At) when maxTokenAge is set.
ā¢ optional crit?: object
Recognized "crit" (Critical) Header Parameter names. Set each value to true to require
integrity protection, or false when protection is optional. The JWS b64 extension is always
recognized and processed.
[!WARNING]
Other extensions are only checked for syntax and optional integrity protection. Their presence is not required by this option. You must check their presence and process them according to the profile's validation steps after the operation succeeds.
[propName: string]: boolean
ā¢ optional currentDate?: Date
Date for NumericDate comparisons. Defaults to new Date().
ā¢ optional issuer?: string | string[]
Expected JWT "iss" (Issuer) Claim value(s). Requires the claim to be present.
ā¢ optional maxTokenAge?: string | number
Maximum time since the JWT "iat" (Issued At) Claim, in seconds or a duration string (e.g. "2 hours"). Requires the claim to be present.
ā¢ optional requiredClaims?: string[]
Additional claim names required in the JWT Claims Set. The issuer, audience, subject, and maxTokenAge options independently require "iss", "aud", "sub", and "iat", respectively.
ā¢ optional subject?: string
Expected JWT "sub" (Subject) Claim value. Requires the claim to be present.
ā¢ optional typ?: string
Expected JWT "typ" (Type) Header Parameter value. Requires the parameter to be present.