Skip to content

Interface: VerifyOptions

Options for verifyBotToken.

appId: string

The bot’s app id; the ONLY audience an inbound token may carry.


optional appTenantId?: string

Tenant of a single-tenant bot, whose own issuer is then also accepted.


optional metadataUrl?: string

OpenID metadata document naming the signing key set. Defaults to BOT_OPENID_METADATA; override for a sovereign cloud.


optional signal?: AbortSignal

Cancels the metadata / JWKS fetch with the request.