types.TokenConfig

issuerstring

Issuer is the value written to each token's iss claim. Empty (default) means the handler falls back to the orchestrator's HTTP base URL inferred from the request — the same URL the JWKS endpoint will be published at, so downstream verifiers can resolve issuer→JWKS via OIDC discovery (ENG-2320). Set explicitly when the orchestrator runs behind a TLS-terminating proxy that rewrites Host.

ttlinteger<int64>

TTL is the lifetime of each issued Node Access Token. Zero (default) means 1 hour. Operators can shorten this for high-rotation environments or lengthen it where DPoP refresh cost is meaningful.

Possible values: [-9223372036854776000, 9223372036854776000, 1, 1000, 1000000, 1000000000, 60000000000, 3600000000000]

types.TokenConfig

{
  "issuer": "string",
  "ttl": -9223372036854776000
}