Optional ReadonlyaccessOptional shared store that rejects revoked typed access credentials.
Supply the same instance to RefreshTokenService for logout invalidation.
Optional ReadonlyalgorithmAlgorithm to use. Inferred from key material if omitted.
Optional ReadonlyaudienceExpected audience for verification.
Optional ReadonlyheaderHeader name for token extraction (default: 'authorization').
Optional ReadonlyissuerExpected issuer for verification.
Optional ReadonlyprivatePrivate key for RS256 signing (PEM format). Required if HS256 secret not provided.
Optional ReadonlypublicPublic key for RS256 verification (PEM format). Required for RS256 verification.
Optional ReadonlyschemeToken scheme prefix (default: 'bearer').
Optional ReadonlysecretSecret key for HS256 algorithm. Required if RS256 keys not provided.
JWT configuration options.
Since
0.1.0