OptionalcustomA list of optional custom claims to be used for JWT validation.
OptionalkeyIf present, this is the list of keys provided out of band to verify the origin and integrity of the JWT.
OptionaltrustedIf present, this is the list to URIs pointing to the metadata file conforming to RFC8414, such as "https://your.domain/.well-known/openid-configuration" , of the trusted Open ID Connect servers issuing JWT tokens. Using metadata, the device can reach the information about the JWKS and implement the rotation of the keys accordingly.
OptionalvalidationIf present, the device will validate the certification path of the Open ID Connect servers. The OIDC server iso considered to be valid if its certificate is validated by the provided certification path validation policy.
List of supported aud claims. A JWT must contain at least one of these.