public Interface Names

The expected "aud" claim value(s), separated by commas. If specified, MP-JWT claim must be present and match one of the values.

The clock skew in seconds used during the token expiry and age verification.

Key Management Algorithm property which can be set to either 'RSA-OAEP' or 'RSA-OAEP-256'

The relative path or full URL of the decryption key. All relative paths will be resolved within the archive using ClassLoader.getResource. If the value is a URL it will be resolved using `new URL(“”).openStream()`

The expected iss claim value to validate against an MP-JWT.

The number of seconds since 'iat' after which the token must be considered invalid.

The Cookie name expected to containe the JWT token (default is Bearer).

This configuration will be ignored unless `mp.jwt.token.header` is set to `Cookie`.

The HTTP header name expected to contain the JWT token.

Supported values are Authorization (default) and Cookie.

The embedded key material of the verification public key for the MP-JWT signer in PKCS8 PEM or JWK(S) format. If not found the VERIFIER_PUBLIC_KEY_LOCATION needs to be checked.

Public Key Signature Algorithm property which can be set to either 'RS256' or 'ES256'.

The relative path or full URL of the verification public key. All relative paths will be resolved within the archive using ClassLoader.getResource. If the value is a URL it will be resolved using `new URL(“”).openStream()`