OptionalaccessOptionalallowedAllowed dpop signing alg values. If not provided
any alg values are allowed and it's up to the verifyJwtCallback
to handle the alg.
Callbacks used for verifying dpop jwt
The compact dpop jwt.
OptionalexpectedThe expected jwk thumprint 'jti' confirmation method. If provided the thumprint of the jwk used to sign the dpop jwt must match this provided thumbprint value. The 'jti' value can be extracted from the access token payload, or if opaque tokens are used can be retrieved using token introspection.
OptionalexpectedExpected nonce in the payload. If not provided the nonce won't be validated.
OptionalnowThe current time to use when verifying the JWTs. If not provided current time will be used.
The request for which to verify the dpop jwt
Access token to which the dpop jwt is bound. If provided the sha-256 hash of the access token needs to match the 'ath' claim.