Skip to content

JwsConfig

Defined in: src/policies/auth/jws.ts:23

Configuration for the jws policy.

optional forwardHeaderName: string

Defined in: src/policies/auth/jws.ts:35

Header name for forwarded payload. Default: “X-JWS-Payload”


optional forwardPayload: boolean

Defined in: src/policies/auth/jws.ts:33

Whether to forward the verified payload as a header. Default: false


optional headerName: string

Defined in: src/policies/auth/jws.ts:29

Header containing the JWS. Default: “X-JWS-Signature”


optional jwksCacheTtlMs: number

Defined in: src/policies/auth/jws.ts:37

JWKS cache TTL in ms. Default: 300000


optional jwksTimeoutMs: number

Defined in: src/policies/auth/jws.ts:39

JWKS fetch timeout in milliseconds. Default: 10000 (10 seconds).


optional jwksUrl: string

Defined in: src/policies/auth/jws.ts:27

JWKS endpoint for RSA verification


optional payloadSource: "body" | "embedded"

Defined in: src/policies/auth/jws.ts:31

Where the payload comes from for detached JWS. Default: “embedded”


optional secret: string

Defined in: src/policies/auth/jws.ts:25

HMAC secret for verification


optional skip: (c) => boolean | Promise<boolean>

Defined in: src/policies/types.ts:90

Skip this policy when condition returns true

unknown

boolean | Promise<boolean>

PolicyConfig.skip