Frends.OAuth.ParseToken / 1.4.0
Summary
Validates an incoming JWT or Authorization header — signature, issuer, audience and lifetime — against signing keys fetched from a discovery endpoint or supplied directly, and returns the claims it carries.
Typical use — authorising callers of a Frends API, where the returned claims are what a Process makes its access decisions on
1.4.02026-11-02
Added
- Options.ClockSkewSeconds for configuring clock skew tolerance in lifetime validation (default 300 seconds, same as before).
1.3.02025-12-02
Added
- Support for handling array-type claims in the token, such as
"roles": ["editor", "admin"].
1.2.02024-08-21
Added
- Support for new IdentityModel-versions.
1.1.02023-12-08
Added
- New dictionary parameter 'ParseResult.Claims' that contains all claims in the token.
1.0.12022-08-04
Changed
- Using custom result values instead of MS library classes for Frends integrity.
1.0.02022-07-01
Added
- Initial implementation