Expected JWT "aud" (Audience) Claim value(s).

This option makes the JWT "aud" (Audience) Claim presence required.

Expected clock tolerance

• In seconds when number (e.g. 5)
• Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").

Expected JWT "iss" (Issuer) Claim value(s).

This option makes the JWT "iss" (Issuer) Claim presence required.

Maximum time elapsed (in seconds) from the JWT "iat" (Issued At) Claim value.

• In seconds when number (e.g. 5)
• Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").

This option makes the JWT "iat" (Issued At) Claim presence required.

Expected JWT "sub" (Subject) Claim value.

This option makes the JWT "sub" (Subject) Claim presence required.

Expected JWT "typ" (Type) Header Parameter value.

This option makes the JWT "typ" (Type) Header Parameter presence required.

Date to use when comparing NumericDate claims, defaults to new Date().

Array of required Claim Names that must be present in the JWT Claims Set. Default is that: if the JWTClaimVerificationOptions.issuer | issuer option is set, then JWT "iss" (Issuer) Claim must be present; if the JWTClaimVerificationOptions.audience | audience option is set, then JWT "aud" (Audience) Claim must be present; if the JWTClaimVerificationOptions.subject | subject option is set, then JWT "sub" (Subject) Claim must be present; if the JWTClaimVerificationOptions.maxTokenAge | maxTokenAge option is set, then JWT "iat" (Issued At) Claim must be present.