GenerateJwtConfig

Defined in: src/policies/auth/generate-jwt.ts:14

Configuration for the generateJwt policy.

Extends

• PolicyConfig

Properties

algorithm

algorithm: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512"

Defined in: src/policies/auth/generate-jwt.ts:16

Signing algorithm

---

audience?

optional audience: string

Defined in: src/policies/auth/generate-jwt.ts:30

Audience claim

---

claims?

optional claims: Record<string, unknown> | (c) => Record<string, unknown> | Promise<Record<string, unknown>>

Defined in: src/policies/auth/generate-jwt.ts:22

Claims to include. Static record or dynamic function.

---

expiresIn?

optional expiresIn: number

Defined in: src/policies/auth/generate-jwt.ts:26

Token lifetime in seconds. Default: 3600 (1 hour)

---

headerName?

optional headerName: string

Defined in: src/policies/auth/generate-jwt.ts:32

Header name for the generated token. Default: “Authorization”

---

issuer?

optional issuer: string

Defined in: src/policies/auth/generate-jwt.ts:28

Issuer claim

---

privateKey?

optional privateKey: JsonWebKey

Defined in: src/policies/auth/generate-jwt.ts:20

RSA private key as JWK (for RS* algorithms)

---

secret?

optional secret: string

Defined in: src/policies/auth/generate-jwt.ts:18

HMAC secret (for HS* algorithms)

---

skip()?

optional skip: (c) => boolean | Promise<boolean>

Defined in: src/policies/types.ts:33

Skip this policy when condition returns true

Parameters

c

unknown

Returns

boolean | Promise<boolean>

Inherited from

PolicyConfig.skip

---

tokenPrefix?

optional tokenPrefix: string

Defined in: src/policies/auth/generate-jwt.ts:34

Token prefix. Default: “Bearer”