JwtDefaults

> NO WARRANTY. Trax auth is plumbing, not a security product. You are solely responsible for securing systems that use it. See API Security.

Constants used by the Trax JWT bearer scheme.

ConstantValueUsage
SchemeNameTraxJwtDefault AuthenticationScheme name registered by AddTraxJwtAuth when no scheme name is supplied.
PolicyNameJwtPolicyDefault authorization policy registered alongside the default scheme.
PrincipalTypejwtValue written to the trax:principal-type claim by DefaultJwtPrincipalResolver.
DispatcherSchemeNameTraxJwtDispatcherDefault policy-scheme name registered by AddTraxJwtDispatcher.
RejectSchemeNameTraxJwtRejectInternal scheme used by the dispatcher when no issuer mapping matches. Always returns AuthenticateResult.Fail.

Named-scheme registrations derive their authorization policy name from the scheme name: a scheme called cognito registers the policy cognito-JwtPolicy.