Interface: VerifyOcOptions
Defined in: auth-core/src/index.ts:816 (opens in a new tab)
Extended byLink to this section
PropertiesLink to this section
| Property | Type | Description | Defined in |
|---|---|---|---|
audience? | AudienceRule | Accepted aud · see AudienceRule. An integrator verifying tokens from the sign-in popup sets this to its own origin, e.g. "https://example.com", so a token issued to another site is refused. | auth-core/src/index.ts:828 (opens in a new tab) |
issuer? | string | Auth host issuer. Defaults to https://ochk.io (opens in a new tab). | auth-core/src/index.ts:818 (opens in a new tab) |
jwksCacheTtlMs? | number | JWKS cache TTL in ms. Defaults to 1 hour. Stale-on-error: if the cache exists, verification still works during a transient outage. | auth-core/src/index.ts:821 (opens in a new tab) |
jwksMaxStaleMs? | number | How old a cached JWKS may be and still stand in during an outage. Defaults to 6 hours; past it, verification fails closed. | auth-core/src/index.ts:824 (opens in a new tab) |