Options for validating a JWT access token.
optionalclientCertificate:string
PEM-encoded client certificate used for certificate-bound token validation.
optionalgroups:string[]
List of group names or identifiers that must be present in the token's groups claim.
optionaljwks:Jwks
Pre-fetched JSON Web Key Set to use for signature verification instead of fetching from the server.
optionalscopes:string[]
List of scopes that must all be present in the token's scope claim.
optionalvalidateCertificateBinding:boolean
When true, validates certificate binding for certificate-bound access tokens.
false;