PrivateKeyJwtConfig¶
Structure Class¶
dataclass
¶
Configuration for private_key_jwt client authentication (RFC 7523). On Create: privateKeySource and signingAlgorithm are required (enforced server-side). On Update: all fields are optional --- only provided fields are updated.
Attributes¶
class-attribute
instance-attribute
¶
additional_header_claims: dict[str, str] | None = None
A map of additional claims to include in the JWT client assertion
header. Standard header claims such as alg and typ cannot be added.
class-attribute
instance-attribute
¶
additional_payload_claims: dict[str, str] | None = None
A map of additional claims to include in the JWT client assertion
payload. Payload claims generated by the service, such as iss, sub,
jti, and exp, cannot be added.
class-attribute
instance-attribute
¶
private_key_source: PrivateKeySource | None = None
The private key source for the JWT client assertion.
class-attribute
instance-attribute
¶
signing_algorithm: SigningAlgorithm | None = None
The algorithm used to sign the JWT client assertion. Valid values are
RS256, PS256, and ES256.