JWTServerProfile

JWTServerProfile
JWTServerProfile
JSON Example 
{
    "_last_modified": "string",
    "allowed_algorithms": [
        "string"
    ],
    "clock_skew_config": {
        "enabled": false,
        "skew_tolerance": 0
    },
    "controller_internal_auth": {
        "symmetric_jwks_keys": [
            {
                "alg": "string",
                "key": "string",
                "kid": "string",
                "kty": "string"
            }
        ]
    },
    "is_federated": false,
    "issuer": "string",
    "jwks_keys": "string",
    "jwt_profile_type": "string",
    "name": "string",
    "protected_resource_config": {
        "authorization_servers": [
            "string"
        ],
        "enable_protected_resource_metadata": false,
        "metadata_url_path": "string",
        "resource_documentation": "string",
        "supported_scopes": [
            "string"
        ]
    },
    "reject_non_expiring_tokens": false,
    "tenant_ref": "string",
    "url": "string",
    "uuid": "string"
}
string
_last_modified
Read-Only  

UNIX time since epoch in microseconds. Units(MICROSECONDS).

array of string
allowed_algorithms
Optional

Allowed signing algorithms when the matched JWK omits the 'alg' field (RFC 7517 §4.4). If the JWK carries 'alg', that value always wins and this list is ignored. An empty list rejects all such tokens (secure default). Only applicable when JWT Profile type is CLIENT_AUTH. Enum options - JWS_ALG_RS256, JWS_ALG_RS384, JWS_ALG_RS512, JWS_ALG_PS256, JWS_ALG_PS384, JWS_ALG_PS512, JWS_ALG_ES256, JWS_ALG_ES384, JWS_ALG_ES512. Field introduced in 32.1.4. Maximum of 9 items allowed. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

ClockSkewToleranceConfig
clock_skew_config
Optional

Clock-skew tolerance applied when validating JWT exp/iat claims, to account for clock drift between the token-issuing and verifying sides.

ControllerInternalAuth
controller_internal_auth
Optional

controller_internal_auth

boolean
is_federated
Optional

This field describes the object's replication scope. If the field is set to false, then the object is visible within the controller-cluster. If the field is set to true, then the object is replicated across the federation. . Field introduced in 20.1.6. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

string
issuer
Optional

Uniquely identifiable name of the Token Issuer, only allowed with profile_type CLIENT_AUTH. Field introduced in 20.1.3. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

string
jwks_keys
Optional

JWKS key set used for validating the JWT, only allowed with profile_type CLIENT_AUTH. Field introduced in 20.1.3. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

string
jwt_profile_type
Optional
Constraints: default: CLIENT_AUTH

Type of JWT Server profile which defines the usage type. Enum options - CLIENT_AUTH, CONTROLLER_INTERNAL_AUTH. Field introduced in 20.1.6. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

string
name
Required  

Name of the JWT Profile. Field introduced in 20.1.3. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

JWTProtectedResourceConfig
protected_resource_config
Optional

protected_resource_config

boolean
reject_non_expiring_tokens
Optional
Constraints: default: true

Reject JWTs whose 'exp' claim is missing or non-numeric. This configuration knob is applicable only when the JWT Profile type is CLIENT_AUTH. Field introduced in 32.1.4. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

string
tenant_ref
Optional

UUID of the Tenant. It is a reference to an object of type Tenant. Field introduced in 20.1.3. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

string
url
Read-Only  

url

string
uuid
Optional

UUID of the JWTProfile. Field introduced in 20.1.3. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

Property Of
Parameter To
Returned By