Interface VerifyAccessTokenOptions

The application's SSO client id; the aud claim must contain it.

Key set cache to verify against. Defaults to one process-wide SsoJwks, or, when fetch or now is given, a new one built from them for this call only; pass a shared instance in that case.

Custom fetch for the key set when jwks is not given.

Seconds of clock difference allowed when checking exp. Defaults to 0.

Clock override for tests, epoch milliseconds.