CustomJWTAuthorizerConfiguration ¶

class CustomJWTAuthorizerConfiguration(TypedDict, closed=True):
    discovery_url: "capo_agent_registry_control.types.discovery_url.DiscoveryUrl"
    """<p>The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.</p>"""
    allowed_audience: NotRequired[
        "capo_agent_registry_control.types.allowed_audience_list.AllowedAudienceList"
    ]
    """<p>The audience values accepted during JWT validation. A token is rejected if none of its audience claims match.</p>"""
    allowed_clients: NotRequired[
        "capo_agent_registry_control.types.allowed_clients_list.AllowedClientsList"
    ]
    """<p>The client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.</p>"""
    allowed_scopes: NotRequired[
        "capo_agent_registry_control.types.allowed_scopes_type.AllowedScopesType"
    ]
    """<p>The scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.</p>"""
    custom_claims: NotRequired[
        "capo_agent_registry_control.types.custom_claim_validations_type.CustomClaimValidationsType"
    ]
    """<p>Additional custom claim validations applied to the inbound JWT.</p>"""
    private_endpoint: NotRequired[
        "capo_agent_registry_control.types.private_endpoint.PrivateEndpoint"
    ]
    """<p>The private endpoint used to reach the identity provider's discovery URL over a private network path.</p>"""
    private_endpoint_overrides: NotRequired[
        "capo_agent_registry_control.types.private_endpoint_overrides.PrivateEndpointOverrides"
    ]
    """<p>Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints.</p>"""