Skip to content

TokenOptions

TokenOptions describes the claims carried by a Token.

readonly optional algorithm?: string

algorithm is the alg header value.


readonly optional audience?: readonly string[]

audience is the aud claim, always held as a list.


readonly optional authorizedParty?: string

authorizedParty is the azp claim, or the empty string when absent.


readonly optional expiresAt?: Timestamp

expiresAt is the exp claim, or the unset timestamp when absent.


readonly optional id?: string

id is the jti claim, or the empty string when absent.


readonly optional issuedAt?: Timestamp

issuedAt is the iat claim, or the unset timestamp when absent.


readonly optional issuer?: string

issuer is the iss claim.


readonly optional keyId?: string

keyId is the kid header value, or the empty string when absent.


readonly optional notBefore?: Timestamp

notBefore is the nbf claim, or the unset timestamp when absent.


readonly optional payload?: Record<string, unknown>

payload contains the decoded claim set, including custom claims.


readonly optional subject?: string

subject is the sub claim.