Expected JWT "aud" (Audience) Claim value(s).

This option makes the JWT "aud" (Audience) Claim presence required.

Expected clock tolerance

• In seconds when number (e.g. 5)
• Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").

Expected JWT "iss" (Issuer) Claim value(s).

This option makes the JWT "iss" (Issuer) Claim presence required.

Maximum time elapsed (in seconds) from the JWT "iat" (Issued At) Claim value.

• In seconds when number (e.g. 5)
• Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").

This option makes the JWT "iat" (Issued At) Claim presence required.

Expected JWT "sub" (Subject) Claim value.

This option makes the JWT "sub" (Subject) Claim presence required.

Expected JWT "typ" (Type) Header Parameter value.

This option makes the JWT "typ" (Type) Header Parameter presence required.

Date to use when comparing NumericDate claims, defaults to new Date().

Array of required Claim Names that must be present in the JWT Claims Set. Default is that: if the {@link JWTClaimVerificationOptions.issuer | issuer option} is set, then JWT "iss" (Issuer) Claim must be present; if the {@link JWTClaimVerificationOptions.audience | audience option} is set, then JWT "aud" (Audience) Claim must be present; if the {@link JWTClaimVerificationOptions.subject | subject option} is set, then JWT "sub" (Subject) Claim must be present; if the {@link JWTClaimVerificationOptions.maxTokenAge | maxTokenAge option} is set, then JWT "iat" (Issued At) Claim must be present.