Optional ReadonlyaudienceIf set, the token's aud claim must include this value.
Optional ReadonlyclockClock tolerance in seconds for exp and nbf checks.
Defaults to 0.
Optional ReadonlyissuerIf set, the token's iss claim must match this value.
Optional ReadonlynowReference timestamp in seconds since epoch for time-based
checks. Defaults to Math.floor(Date.now() / 1000).
Optional ReadonlyrequiredAdditional claim names that must be present in the payload.
Optional ReadonlyrequireIf true, the token must have a sub claim.
Options for validateJwt.
All fields are optional — only the checks whose options are provided will be executed.