@backblaze-labs/b2-mcp
    Preparing search index...

    Interface OAuthResourceServerCommonConfig

    Common OAuth resource-server settings shared by introspection and JWKS verification.

    interface OAuthResourceServerCommonConfig {
        allowedAlgorithms: string[];
        allowedJwtAlgorithms: string[];
        allowedJwtTypes: string[];
        allowedSubjects: string[];
        allowedTokenTypes: string[];
        audience: string;
        authorizationEndpoint: string;
        dangerouslyAllowInsecureIssuerUrl: boolean;
        dangerouslyAllowUnauthenticatedIntrospection: boolean;
        issuer: string;
        publicUrl: string;
        requiredScopes: string[];
        resource: string;
        serviceDocumentationUrl?: string;
        tokenCacheMaxEntries: number;
        tokenCacheSkewSeconds: number;
        tokenCacheTtlSeconds: number;
        tokenEndpoint: string;
    }

    Hierarchy (View Summary)

    Index
    allowedAlgorithms allowedJwtAlgorithms allowedJwtTypes allowedSubjects allowedTokenTypes audience authorizationEndpoint dangerouslyAllowInsecureIssuerUrl dangerouslyAllowUnauthenticatedIntrospection issuer publicUrl requiredScopes resource serviceDocumentationUrl? tokenCacheMaxEntries tokenCacheSkewSeconds tokenCacheTtlSeconds tokenEndpoint
    allowedAlgorithms: string[]

    Allowed token algorithms for introspection responses and JWTs.

    allowedJwtAlgorithms: string[]

    Allowed JWT signature algorithms for local verification.

    allowedJwtTypes: string[]

    Allowed JWT typ header values.

    allowedSubjects: string[]

    Allowed OAuth subjects or issuer-qualified subjects.

    allowedTokenTypes: string[]

    Allowed token type values from introspection responses.

    audience: string

    Expected OAuth audience value.

    authorizationEndpoint: string

    Authorization endpoint advertised in OAuth metadata.

    dangerouslyAllowInsecureIssuerUrl: boolean

    Whether localhost-only insecure issuer URLs are allowed for development.

    dangerouslyAllowUnauthenticatedIntrospection: boolean

    Whether introspection may run without client or bearer authentication.

    issuer: string

    Trusted OAuth issuer URL.

    publicUrl: string

    Public MCP deployment URL used when constructing metadata URLs.

    requiredScopes: string[]

    Required OAuth scopes beyond the B2 deployment scope.

    resource: string

    OAuth protected resource URL for this MCP deployment.

    serviceDocumentationUrl?: string

    Optional service documentation URL advertised in metadata.

    tokenCacheMaxEntries: number

    Maximum cached token entries.

    tokenCacheSkewSeconds: number

    Token-cache expiration skew in seconds.

    tokenCacheTtlSeconds: number

    Token-cache TTL in seconds.

    tokenEndpoint: string

    Token endpoint advertised in OAuth metadata.

    Settings
    Member Visibility

    On This Page
    Properties