Interface PoPTokenPayload

JWT Audience.

Typically the base URL of the OpenID Provider.

JWT Expiration Time.

The seconds-precision Unix timestamp when the PoP Token expires.

JWT Issued At.

The seconds-precision Unix timestamp when the PoP Token was issued.

JWT Issuer.

Typically the Client ID.

JWT ID.

A randomly generated string that is unique for the combination of issuer, subject and audience within the lifespan of the PoP Token.

JWT Not Before.

The seconds-precision Unix timestamp when the PoP Token becomes valid.

Array of optional identity claims.

Array of required identity claims.

JWT Subject.

Typically the identifier of the End-User.

Whether the audience should be present.

Default

true
Copy