Documentation navigation

JwtPayload

Claims contained in a Jupiter access token.

NameTypeDefinition
issstringToken issuer.
substringUser identifier.
audstring | string[]Token audience.
expnumberExpiration time as a Unix timestamp.
iatnumberIssue time as a Unix timestamp.
rolestringUser role.
aalAuthenticatorAssuranceLevelsAuthenticator assurance level.
session_idstringSession identifier.
email?stringUser email address.
phone?stringUser phone number.
is_anonymous?booleanWhether the user is anonymous.
jti?stringJWT identifier.
nbf?numberNot-before time as a Unix timestamp.
system_attributes?JsonObjectSystem-managed user attributes.
user_attributes?JsonObjectApplication-defined user attributes.
amr?AMREntry[] | string[]Authentication method references.
ref?stringToken reference.

Example

{  "iss": "https://api.jupitercloud.co/auth",  "sub": "user-id",  "aud": "project-id",  "exp": 1767229200,  "iat": 1767225600,  "role": "authenticated",  "aal": "aal1",  "session_id": "session-id",  "email": "user@example.com",  "is_anonymous": false,  "user_attributes": {},  "system_attributes": {},  "amr": [    {      "method": "password",      "timestamp": 1767225600    }  ]}