# Class SignedTokenVerificationOptions (1.73.0)

<button class="button button-with-icon cloud-select-dropdown__button " aria-haspopup="true">Version latest</button>

- [1.73.0 (latest)](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Auth.SignedTokenVerificationOptions)
- [1.69.0](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/1.69.0/Google.Apis.Auth.SignedTokenVerificationOptions)
- [1.68.0](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/1.68.0/Google.Apis.Auth.SignedTokenVerificationOptions)
- [1.60.0](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/1.60.0/Google.Apis.Auth.SignedTokenVerificationOptions)
- [1.59.0](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/1.59.0/Google.Apis.Auth.SignedTokenVerificationOptions)
- [1.55.0](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/1.55.0/Google.Apis.Auth.SignedTokenVerificationOptions)
- [1.50.0](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/1.50.0/Google.Apis.Auth.SignedTokenVerificationOptions)

    public sealed class SignedTokenVerificationOptions

Options to use when verifying signed JWTs.

## Inheritance

[object](https://learn.microsoft.com/dotnet/api/system.object) \> SignedTokenVerificationOptions

## Inherited Members

[object.Equals(object)](https://learn.microsoft.com/dotnet/api/system.object.equals#system-object-equals(system-object)) [object.Equals(object, object)](https://learn.microsoft.com/dotnet/api/system.object.equals#system-object-equals(system-object-system-object)) [object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) [object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) [object.ReferenceEquals(object, object)](https://learn.microsoft.com/dotnet/api/system.object.referenceequals) [object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)

## Namespace

[Google.Apis.Auth](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Auth)

## Assembly

Google.Apis.Auth.dll

## Constructors

### SignedTokenVerificationOptions()

    public SignedTokenVerificationOptions()

Creates a new instance of [SignedTokenVerificationOptions](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Auth.SignedTokenVerificationOptions)
with default values for all options (or null for those whose default is unset).

### SignedTokenVerificationOptions(SignedTokenVerificationOptions)

    public SignedTokenVerificationOptions(SignedTokenVerificationOptions other)

Creates a new instance of [SignedTokenVerificationOptions](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Auth.SignedTokenVerificationOptions)
by copying over all the values from `other`.

| **Parameter** ||
|---|---|
| **Name** | **Description** |
| `other` | `https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Auth.SignedTokenVerificationOptions` The option set to build this instance from. |

## Properties

### CertificatesUrl

    public string CertificatesUrl { get; set; }

The URL from where to obtain certificates from.
May be null, in which case, default certificate locations will be used:

- For RS256 signed certificates, <https://www.googleapis.com/oauth2/v3/certs> will be used.
- For ES256 signed certificates, <https://www.gstatic.com/iap/verify/public_key-jwk> will be used.

<br />

| **Property Value** ||
|---|---|
| **Type** | **Description** |
| `https://learn.microsoft.com/dotnet/api/system.string` |   |

### ExpiryClockTolerance

    public TimeSpan ExpiryClockTolerance { get; set; }

Clock tolerance for the expiration check.
Causes a JWT to pass validation up to this duration after it really expired;
this is to allow for possible local-client clock skew.
Defaults to zero.
Internal to be used only for backward compatibility.

| **Property Value** ||
|---|---|
| **Type** | **Description** |
| `https://learn.microsoft.com/dotnet/api/system.timespan` |   |

### IssuedAtClockTolerance

    public TimeSpan IssuedAtClockTolerance { get; set; }

Clock tolerance for the issued-at check.
Causes a JWT to pass validation up to this duration before it is really valid;
this is to allow for possible local-client clock skew.
Defaults to zero.
Internal to be used only for backward compatibility.

| **Property Value** ||
|---|---|
| **Type** | **Description** |
| `https://learn.microsoft.com/dotnet/api/system.timespan` |   |

### TrustedAudiences

    public IList<string> TrustedAudiences { get; }

Trusted audiences for the token.
All the audiences the token is intended for should be in the
trusted audiences list.
If the list is empty, the token audience won't be verified.

| **Property Value** ||
|---|---|
| **Type** | **Description** |
| `https://learn.microsoft.com/dotnet/api/system.collections.generic.ilist-1https://learn.microsoft.com/dotnet/api/system.string` |   |

### TrustedIssuers

    public IList<string> TrustedIssuers { get; }

List of trusted issuers to verify the token issuer against.
The token issuer must be contained in this list.
May be null, in which case the token issuer won't be verified.

| **Property Value** ||
|---|---|
| **Type** | **Description** |
| `https://learn.microsoft.com/dotnet/api/system.collections.generic.ilist-1https://learn.microsoft.com/dotnet/api/system.string` |   |

## Extension Method

[Utilities.ThrowIfNull\<T\>(T, string)](https://docs.cloud.google.com/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Util.Utilities#Google_Apis_Util_Utilities_ThrowIfNull__1___0_System_String_)