Interface JWTPayload

JWT claims per RFC 7519. Standard claims are typed; custom claims are allowed via index signature. Defined here to keep the KeyStore interface jose-independent — implementations may use jose, node-jose, fast-jwt, or direct KMS SDK calls.

interface JWTPayload {
    aud?: string | string[];
    exp?: number;
    iat?: number;
    iss?: string;
    jti?: string;
    nbf?: number;
    sub?: string;
    [propName: string]: unknown;
}