Interface: JwtValidatorOptions

Interface: JwtValidatorOptions

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:25

Constructor options for JwtValidator.

Mirrors PHP’s Vendidit\AuthServer\Tokens\JwtValidator.

Properties

accessSecret

accessSecret: string

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:27

Shared HS256 secret. Required.

---

accessSecretPrevious?

optional accessSecretPrevious?: string | null

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:29

Previous secret slot — only used on signature-mismatch retry.

---

audience?

optional audience?: string

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:33

Expected aud claim. Default ven-platform.

---

cache?

optional cache?: RevocationCache | null

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:37

Revocation cache. Optional.

---

checkRevocation?

optional checkRevocation?: boolean

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:39

Check auth:blacklist:{jti}. Default true.

---

checkTokenVersion?

optional checkTokenVersion?: boolean

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:41

Check auth:user_tv:{user_id}. Default true.

---

issuer?

optional issuer?: string

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:31

Expected iss claim. Default ven-auth.

---

leewaySeconds?

optional leewaySeconds?: number

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:35

Skew tolerance (seconds). Default 30.

---

logger?

optional logger?: LoggerPort

Defined in: auth-server-ts/src/tokens/jwt-validator.ts:43

Optional logger.