JwtResponse

data class JwtResponse(val audiences: List<String>, val issuer: String, val jwksPublicKeys: String, val jwtHeaders: List<JwtHeaderResponse>, val jwtParams: List<String>)

Deprecated JWT configuration for origin authentication. JWT configuration for origin authentication.

Constructors

Link copied to clipboard
fun JwtResponse(audiences: List<String>, issuer: String, jwksPublicKeys: String, jwtHeaders: List<JwtHeaderResponse>, jwtParams: List<String>)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

A JWT containing any of these audiences will be accepted. The service name will be accepted if audiences is empty. Examples: bookstore_android.apps.googleusercontent.com, bookstore_web.apps.googleusercontent.com

Link copied to clipboard

Identifies the issuer that issued the JWT, which is usually a URL or an email address. Examples: https://securetoken.google.com, 1234567-compute@developer.gserviceaccount.com

Link copied to clipboard

The provider's public key set to validate the signature of the JWT.

Link copied to clipboard

jwt_headers and jwt_params define where to extract the JWT from an HTTP request. If no explicit location is specified, the following default locations are tried in order: 1. The Authorization header using the Bearer schema. See here . Example: Authorization: Bearer . 2. access_token query parameter. See this Multiple JWTs can be verified for a request. Each JWT has to be extracted from the locations its issuer specified or from the default locations. This field is set if JWT is sent in a request header. This field specifies the header name. For example, if header=x-goog-iap-jwt-assertion, the header format will be x-goog-iap-jwt-assertion: .

Link copied to clipboard

This field is set if JWT is sent in a query parameter. This field specifies the query parameter name. For example, if jwt_params0 is jwt_token, the JWT format in the query parameter is /path?jwt_token=.