#### [Abblix\.Jwt](https://www.abblix.com/en/docs/api/abblix-jwt 'index')
### [Abblix\.Jwt](https://www.abblix.com/en/docs/api/abblix-jwt/Abblix.Jwt 'Abblix\.Jwt')

## ValidationParameters Class

Defines parameters used during the validation of a JSON Web Token \(JWT\)\.

```csharp
public record ValidationParameters : System.IEquatable<Abblix.Jwt.ValidationParameters>
```

Inheritance [System\.Object](https://learn.microsoft.com/en-us/dotnet/api/system.object 'System\.Object') → ValidationParameters

Implements [System\.IEquatable&lt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')[ValidationParameters](https://www.abblix.com/en/docs/api/abblix-jwt/Abblix.Jwt.ValidationParameters 'Abblix\.Jwt\.ValidationParameters')[&gt;](https://learn.microsoft.com/en-us/dotnet/api/system.iequatable-1 'System\.IEquatable\`1')
### Properties

## ValidationParameters\.AllowedSigningAlgorithms Property {#Abblix.Jwt.ValidationParameters.AllowedSigningAlgorithms}

JWS signing algorithms \(per RFC 7518\) that the validator MUST accept; any other
`alg` in the JOSE header causes rejection\. When `null` or empty the
check is skipped — the validator only enforces the basic
[RequireSignedTokens](https://www.abblix.com/en/docs/api/abblix-jwt/Abblix.Jwt.ValidationOptions#Abblix.Jwt.ValidationOptions.RequireSignedTokens 'Abblix\.Jwt\.ValidationOptions\.RequireSignedTokens') rule \(which forbids
`none`\) and lets any registered signer match\.

```csharp
public System.Collections.Generic.IReadOnlySet<string>? AllowedSigningAlgorithms { get; init; }
```

#### Property Value
[System\.Collections\.Generic\.IReadOnlySet&lt;](https://learn.microsoft.com/en-us/dotnet/api/system.collections.generic.ireadonlyset-1 'System\.Collections\.Generic\.IReadOnlySet\`1')[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')[&gt;](https://learn.microsoft.com/en-us/dotnet/api/system.collections.generic.ireadonlyset-1 'System\.Collections\.Generic\.IReadOnlySet\`1')

### Remarks
Use this to express policy beyond "signed\-or\-not" without writing per\-algorithm
matchers in callers: pass the asymmetric\-only set to enforce DPoP RFC 9449 §4\.2,
pass \{RS256, ES256\} to require small\-footprint algorithms only, and so on\.
Comparison is byte\-exact per RFC 7515 §5\.3\.

## ValidationParameters\.ClockSkew Property {#Abblix.Jwt.ValidationParameters.ClockSkew}

Time window applied to accommodate clock discrepancies when validating timestamps\.

```csharp
public System.TimeSpan ClockSkew { get; set; }
```

#### Property Value
[System\.TimeSpan](https://learn.microsoft.com/en-us/dotnet/api/system.timespan 'System\.TimeSpan')

## ValidationParameters\.ExpectedTokenTypes Property {#Abblix.Jwt.ValidationParameters.ExpectedTokenTypes}

Token\-type values \(per RFC 7515 §4\.1\.9 `typ` header\) that the JWT MUST match\.
When non\-null and non\-empty the validator pins `typ` per RFC 8725 §3\.11 to
prevent token\-class confusion: a JWS signed for one class \(id\_token, logout\_token,
request\_object, DPoP proof, JARM response, OAuth access\_token\) cannot be replayed
as another by relying parties that trust the same issuer for several classes\.

```csharp
public System.Collections.Generic.IReadOnlySet<string>? ExpectedTokenTypes { get; init; }
```

#### Property Value
[System\.Collections\.Generic\.IReadOnlySet&lt;](https://learn.microsoft.com/en-us/dotnet/api/system.collections.generic.ireadonlyset-1 'System\.Collections\.Generic\.IReadOnlySet\`1')[System\.String](https://learn.microsoft.com/en-us/dotnet/api/system.string 'System\.String')[&gt;](https://learn.microsoft.com/en-us/dotnet/api/system.collections.generic.ireadonlyset-1 'System\.Collections\.Generic\.IReadOnlySet\`1')

### Remarks
Comparison follows the spec rules: case\-sensitive \(RFC 7515 §5\.3\), with the
`application/`\-prefix\-stripping convention from §4\.1\.9 applied before lookup
— `typ=at+jwt` and `typ=application/at+jwt` are accepted equivalently\.
When this property is null or empty the validator skips the check, preserving
historical behaviour for callers that have not opted in\.

## ValidationParameters\.Options Property {#Abblix.Jwt.ValidationParameters.Options}

Options that control various aspects of JWT validation\.

```csharp
public Abblix.Jwt.ValidationOptions Options { get; init; }
```

#### Property Value
[ValidationOptions](https://www.abblix.com/en/docs/api/abblix-jwt/Abblix.Jwt.ValidationOptions 'Abblix\.Jwt\.ValidationOptions')

## ValidationParameters\.ResolveIssuerSigningKeys Property {#Abblix.Jwt.ValidationParameters.ResolveIssuerSigningKeys}

Delegate that resolves the signing keys for a given issuer, used during token signature validation\.

```csharp
public Abblix.Jwt.ValidationParameters.ResolveIssuerSigningKeysDelegate? ResolveIssuerSigningKeys { get; set; }
```

#### Property Value
[ResolveIssuerSigningKeysDelegate\(string\)](Abblix.Jwt.ValidationParameters.ResolveIssuerSigningKeysDelegate(string).md 'Abblix\.Jwt\.ValidationParameters\.ResolveIssuerSigningKeysDelegate\(string\)')

## ValidationParameters\.ResolveTokenDecryptionKeys Property {#Abblix.Jwt.ValidationParameters.ResolveTokenDecryptionKeys}

Delegate that resolves decryption keys for a given issuer, used during token decryption\.

```csharp
public Abblix.Jwt.ValidationParameters.ResolveTokenDecryptionKeysDelegate? ResolveTokenDecryptionKeys { get; set; }
```

#### Property Value
[ResolveTokenDecryptionKeysDelegate\(string\)](Abblix.Jwt.ValidationParameters.ResolveTokenDecryptionKeysDelegate(string).md 'Abblix\.Jwt\.ValidationParameters\.ResolveTokenDecryptionKeysDelegate\(string\)')

## ValidationParameters\.ValidateAudience Property {#Abblix.Jwt.ValidationParameters.ValidateAudience}

Delegate used to validate one or more token audiences\.

```csharp
public Abblix.Jwt.ValidationParameters.ValidateAudienceDelegate? ValidateAudience { get; set; }
```

#### Property Value
[ValidateAudienceDelegate\(IEnumerable&lt;string&gt;\)](Abblix.Jwt.ValidationParameters.ValidateAudienceDelegate(System.Collections.Generic.IEnumerable_string_).md 'Abblix\.Jwt\.ValidationParameters\.ValidateAudienceDelegate\(System\.Collections\.Generic\.IEnumerable\<string\>\)')

## ValidationParameters\.ValidateIssuer Property {#Abblix.Jwt.ValidationParameters.ValidateIssuer}

Delegate used to verify the validity of a token issuer\.

```csharp
public Abblix.Jwt.ValidationParameters.ValidateIssuersDelegate? ValidateIssuer { get; set; }
```

#### Property Value
[ValidateIssuersDelegate\(string\)](Abblix.Jwt.ValidationParameters.ValidateIssuersDelegate(string).md 'Abblix\.Jwt\.ValidationParameters\.ValidateIssuersDelegate\(string\)')