Token Validation Parameter

Token Validation Parameter

TokenValidationParameters tvp = new TokenValidationParameters() {
	ValidateActor = false,
	// check the profile ID
	ValidateAudience = true,
	// check the client ID
	ValidAudience = CLIENT_ID,

	ValidateIssuer = true,
	// check token came from Google
	ValidIssuers = new List < string > {
		"accounts.google.com",
		"https://accounts.google.com"
	},

	ValidateIssuerSigningKey = true,
	RequireSignedTokens = true,
	IssuerSigningKeys = certificates.Values.Select(x = >new X509SecurityKey(x)),
	IssuerSigningKeyResolver = (token, securityToken, kid, validationParameters) = >{
		return certificates.Where(x = >x.Key.ToUpper() == kid.ToUpper()).Select(x = >new X509SecurityKey(x.Value));
	},
	ValidateLifetime = true,
	RequireExpirationTime = true,
	ClockSkew = TimeSpan.FromHours(13)
};