@backblaze-labs/b2-mcp
    Preparing search index...

    Interface OAuthIntrospectionVerifierConfig

    Configuration required to verify bearer tokens by OAuth introspection.

    interface OAuthIntrospectionVerifierConfig {
        allowedAlgorithms: string[];
        allowedJwtAlgorithms: string[];
        allowedJwtTypes: string[];
        allowedSubjects: string[];
        allowedTokenTypes: string[];
        audience: string;
        authorizationEndpoint: string;
        dangerouslyAllowInsecureIssuerUrl: boolean;
        dangerouslyAllowUnauthenticatedIntrospection: boolean;
        introspectionBearerToken?: string;
        introspectionCircuitFailures: number;
        introspectionCircuitOpenMs: number;
        introspectionClientId?: string;
        introspectionClientSecret?: string;
        introspectionEndpoint: string;
        introspectionMaxRetries: number;
        introspectionRetryDelayMs: number;
        introspectionTimeoutMs: number;
        issuer: string;
        publicUrl: string;
        requiredScopes: string[];
        resource: string;
        serviceDocumentationUrl?: string;
        tokenCacheMaxEntries: number;
        tokenCacheSkewSeconds: number;
        tokenCacheTtlSeconds: number;
        tokenEndpoint: string;
    }

    Hierarchy (View Summary)

    Index
    allowedAlgorithms allowedJwtAlgorithms allowedJwtTypes allowedSubjects allowedTokenTypes audience authorizationEndpoint dangerouslyAllowInsecureIssuerUrl dangerouslyAllowUnauthenticatedIntrospection introspectionBearerToken? introspectionCircuitFailures introspectionCircuitOpenMs introspectionClientId? introspectionClientSecret? introspectionEndpoint introspectionMaxRetries introspectionRetryDelayMs introspectionTimeoutMs issuer publicUrl requiredScopes resource serviceDocumentationUrl? tokenCacheMaxEntries tokenCacheSkewSeconds tokenCacheTtlSeconds tokenEndpoint
    allowedAlgorithms: string[]

    Allowed token algorithms for introspection responses and JWTs.

    allowedJwtAlgorithms: string[]

    Allowed JWT signature algorithms for local verification.

    allowedJwtTypes: string[]

    Allowed JWT typ header values.

    allowedSubjects: string[]

    Allowed OAuth subjects or issuer-qualified subjects.

    allowedTokenTypes: string[]

    Allowed token type values from introspection responses.

    audience: string

    Expected OAuth audience value.

    authorizationEndpoint: string

    Authorization endpoint advertised in OAuth metadata.

    dangerouslyAllowInsecureIssuerUrl: boolean

    Whether localhost-only insecure issuer URLs are allowed for development.

    dangerouslyAllowUnauthenticatedIntrospection: boolean

    Whether introspection may run without client or bearer authentication.

    introspectionBearerToken?: string

    Bearer token used to authenticate introspection requests.

    introspectionCircuitFailures: number

    Consecutive dependency failures before opening the introspection circuit.

    introspectionCircuitOpenMs: number

    Introspection circuit open duration in milliseconds.

    introspectionClientId?: string

    Client ID used for introspection basic authentication.

    introspectionClientSecret?: string

    Client secret used for introspection basic authentication.

    introspectionEndpoint: string

    OAuth introspection endpoint URL.

    introspectionMaxRetries: number

    Maximum retry attempts for introspection dependency calls.

    introspectionRetryDelayMs: number

    Retry delay in milliseconds for introspection dependency calls.

    introspectionTimeoutMs: number

    Introspection request timeout in milliseconds.

    issuer: string

    Trusted OAuth issuer URL.

    publicUrl: string

    Public MCP deployment URL used when constructing metadata URLs.

    requiredScopes: string[]

    Required OAuth scopes beyond the B2 deployment scope.

    resource: string

    OAuth protected resource URL for this MCP deployment.

    serviceDocumentationUrl?: string

    Optional service documentation URL advertised in metadata.

    tokenCacheMaxEntries: number

    Maximum cached token entries.

    tokenCacheSkewSeconds: number

    Token-cache expiration skew in seconds.

    tokenCacheTtlSeconds: number

    Token-cache TTL in seconds.

    tokenEndpoint: string

    Token endpoint advertised in OAuth metadata.

    Settings
    Member Visibility

    On This Page
    Properties