interface CustomJWTAuthorizerConfigurationProperty

Language	Type name
.NET	Amazon.CDK.AWS.AgentRegistry.CfnRegistry.CustomJWTAuthorizerConfigurationProperty
Go	github.com/aws/aws-cdk-go/awscdk/v2/awsagentregistry#CfnRegistry_CustomJWTAuthorizerConfigurationProperty
Java	software.amazon.awscdk.services.agentregistry.CfnRegistry.CustomJWTAuthorizerConfigurationProperty
Python	aws_cdk.aws_agentregistry.CfnRegistry.CustomJWTAuthorizerConfigurationProperty
TypeScript	aws-cdk-lib » aws_agentregistry » CfnRegistry » CustomJWTAuthorizerConfigurationProperty

Configuration for a custom JWT authorizer that validates inbound bearer tokens against an OpenID Connect identity provider.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-agentregistry-registry-customjwtauthorizerconfiguration.html

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_agentregistry as agentregistry } from 'aws-cdk-lib';
const customJWTAuthorizerConfigurationProperty: agentregistry.CfnRegistry.CustomJWTAuthorizerConfigurationProperty = {
  discoveryUrl: 'discoveryUrl',

  // the properties below are optional
  allowedAudience: ['allowedAudience'],
  allowedClients: ['allowedClients'],
  allowedScopes: ['allowedScopes'],
  customClaims: [{
    authorizingClaimMatchValue: {
      claimMatchOperator: 'claimMatchOperator',
      claimMatchValue: {
        matchValueString: 'matchValueString',
        matchValueStringList: ['matchValueStringList'],
      },
    },
    inboundTokenClaimName: 'inboundTokenClaimName',
    inboundTokenClaimValueType: 'inboundTokenClaimValueType',
  }],
};

Properties

Name	Type	Description
discoveryUrl	string	The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
allowedAudience?	string[]	The audience values accepted during JWT validation.
allowedClients?	string[]	The client identifiers accepted during JWT validation.
allowedScopes?	string[]	The scopes accepted during JWT validation.
customClaims?	IResolvable | (IResolvable | CustomClaimValidationTypeProperty)[]	Additional custom claim validations applied to the inbound JWT.

---

discoveryUrl

Type: string

The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-agentregistry-registry-customjwtauthorizerconfiguration.html#cfn-agentregistry-registry-customjwtauthorizerconfiguration-discoveryurl

---

allowedAudience?

Type: string[] (optional)

The audience values accepted during JWT validation.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-agentregistry-registry-customjwtauthorizerconfiguration.html#cfn-agentregistry-registry-customjwtauthorizerconfiguration-allowedaudience

---

allowedClients?

Type: string[] (optional)

The client identifiers accepted during JWT validation.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-agentregistry-registry-customjwtauthorizerconfiguration.html#cfn-agentregistry-registry-customjwtauthorizerconfiguration-allowedclients

---

allowedScopes?

Type: string[] (optional)

The scopes accepted during JWT validation.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-agentregistry-registry-customjwtauthorizerconfiguration.html#cfn-agentregistry-registry-customjwtauthorizerconfiguration-allowedscopes

---

customClaims?

Type: IResolvable | (IResolvable | CustomClaimValidationTypeProperty)[] (optional)

Additional custom claim validations applied to the inbound JWT.

See also: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-agentregistry-registry-customjwtauthorizerconfiguration.html#cfn-agentregistry-registry-customjwtauthorizerconfiguration-customclaims