CustomJWTAuthorizerConfiguration

Configuration for inbound JWT-based authorization, specifying how incoming requests should be authenticated.

discoveryUrl

This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.

Type: String

Pattern: .+/\.well-known/openid-configuration

Required: Yes

allowedAudience

Represents individual audience values that are validated in the incoming JWT token validation process.

Type: Array of strings

Array Members: Minimum number of 1 item.

Required: No

allowedClients

Represents individual client IDs that are validated in the incoming JWT token validation process.

Type: Array of strings

Array Members: Minimum number of 1 item.

Required: No

allowedScopes

An array of scopes that are allowed to access the token.

Type: Array of strings

Array Members: Minimum number of 1 item.

Length Constraints: Minimum length of 1. Maximum length of 255.

Pattern: [\x21\x23-\x5B\x5D-\x7E]+

Required: No

customClaims

An array of objects that define a custom claim validation name, value, and operation

Array Members: Minimum number of 1 item.

Required: No

Contents