axiam::AuthenticatorOptions Struct Reference

Tuning for TokenAuthenticator. The defaults are the safe ones. More...

#include <authenticator.hpp>

Public Attributes
std::chrono::seconds	clock_skew {kDefaultClockSkew}
	Tolerance applied to exp and nbf for small clock differences between this resource server and the AXIAM issuer.
std::optional< std::string >	expected_issuer
	When set, the iss claim must be present and equal to this value.
std::optional< std::string >	expected_audience
	When set, the aud claim must be present and must contain this value (aud may be a string or an array of strings).
NowFn	now
	Time source. Empty => the system clock.

Detailed Description

Tuning for TokenAuthenticator. The defaults are the safe ones.

Member Data Documentation

clock_skew

std::chrono::seconds axiam::AuthenticatorOptions::clock_skew {kDefaultClockSkew}

Tolerance applied to exp and nbf for small clock differences between this resource server and the AXIAM issuer.

Deliberately small: it widens the window in which an expired access token is still accepted. Must be in [0, kMaxClockSkew]; anything else throws from the constructor.

expected_issuer

std::optional<std::string> axiam::AuthenticatorOptions::expected_issuer

When set, the iss claim must be present and equal to this value.

expected_audience

std::optional<std::string> axiam::AuthenticatorOptions::expected_audience

When set, the aud claim must be present and must contain this value (aud may be a string or an array of strings).

now

NowFn axiam::AuthenticatorOptions::now

Time source. Empty => the system clock.

---

The documentation for this struct was generated from the following file:

• include/axiam/authenticator.hpp