public TimeSpan ExpirationTimeClockTolerance { get; set; }
Clock tolerance for the expiration check.
Causes a JWT to pass validation up to this duration after it really expired;
this is to allow for possible local-client clock skew. Defaults to zero seconds.
public TimeSpan IssuedAtClockTolerance { get; set; }
Clock tolerance for the issued-at check.
Causes a JWT to pass validation up to this duration before it is really valid;
this is to allow for possible local-client clock skew. Defaults to 30 seconds.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis webpage details the \u003ccode\u003eGoogleJsonWebSignature.ValidationSettings\u003c/code\u003e class, which provides settings for validating JSON Web Signatures, and is found in the \u003ccode\u003eGoogle.Apis.Auth\u003c/code\u003e namespace within the \u003ccode\u003eGoogle.Apis.Auth.dll\u003c/code\u003e assembly.\u003c/p\u003e\n"],["\u003cp\u003eThe class is versioned, with the latest version being 1.69.0, and previous versions such as 1.68.0, 1.60.0, 1.59.0, 1.55.0, and 1.50.0 also available for reference.\u003c/p\u003e\n"],["\u003cp\u003eKey properties include \u003ccode\u003eAudience\u003c/code\u003e for trusted client IDs, \u003ccode\u003eClock\u003c/code\u003e for JWT expiration verification (defaults to the system clock), \u003ccode\u003eExpirationTimeClockTolerance\u003c/code\u003e for managing clock skew, \u003ccode\u003eForceGoogleCertRefresh\u003c/code\u003e to force new certificate downloads, \u003ccode\u003eHostedDomain\u003c/code\u003e for validating GSuite domains, and \u003ccode\u003eIssuedAtClockTolerance\u003c/code\u003e to address clock skew for the issued-at time.\u003c/p\u003e\n"],["\u003cp\u003eThe class inherits members from the base \u003ccode\u003eobject\u003c/code\u003e class such as \u003ccode\u003eEquals\u003c/code\u003e, \u003ccode\u003eGetHashCode\u003c/code\u003e, \u003ccode\u003eGetType\u003c/code\u003e, \u003ccode\u003eReferenceEquals\u003c/code\u003e and \u003ccode\u003eToString\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe class also have one extension method, being \u003ccode\u003eUtilities.ThrowIfNull<T>(T, string)\u003c/code\u003e and the class constructor is \u003ccode\u003eValidationSettings()\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,["# Class GoogleJsonWebSignature.ValidationSettings (1.69.0)\n\nVersion latestkeyboard_arrow_down\n\n- [1.69.0 (latest)](/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Auth.GoogleJsonWebSignature.ValidationSettings)\n- [1.68.0](/dotnet/docs/reference/Google.Apis/1.68.0/Google.Apis.Auth.GoogleJsonWebSignature.ValidationSettings)\n- [1.60.0](/dotnet/docs/reference/Google.Apis/1.60.0/Google.Apis.Auth.GoogleJsonWebSignature.ValidationSettings)\n- [1.59.0](/dotnet/docs/reference/Google.Apis/1.59.0/Google.Apis.Auth.GoogleJsonWebSignature.ValidationSettings)\n- [1.55.0](/dotnet/docs/reference/Google.Apis/1.55.0/Google.Apis.Auth.GoogleJsonWebSignature.ValidationSettings)\n- [1.50.0](/dotnet/docs/reference/Google.Apis/1.50.0/Google.Apis.Auth.GoogleJsonWebSignature.ValidationSettings) \n\n public sealed class GoogleJsonWebSignature.ValidationSettings\n\nSettings used when validating a JSON Web Signature. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e GoogleJsonWebSignature.ValidationSettings \n\nInherited Members\n-----------------\n\n[object.Equals(object)](https://learn.microsoft.com/dotnet/api/system.object.equals#system-object-equals(system-object)) \n[object.Equals(object, object)](https://learn.microsoft.com/dotnet/api/system.object.equals#system-object-equals(system-object-system-object)) \n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ReferenceEquals(object, object)](https://learn.microsoft.com/dotnet/api/system.object.referenceequals) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Apis.Auth](/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Auth)\n\nAssembly\n--------\n\nGoogle.Apis.Auth.dll\n\nConstructors\n------------\n\n### ValidationSettings()\n\n public ValidationSettings()\n\nCreate a new instance.\n\nProperties\n----------\n\n### Audience\n\n public IEnumerable\u003cstring\u003e Audience { get; set; }\n\nThe trusted audience client IDs; or `null` to suppress audience validation.\n\n### Clock\n\n public IClock Clock { get; set; }\n\nOptional. The [IClock](/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Util.IClock) to use for JWT expiration verification. Defaults to the system clock.\n\n### ExpirationTimeClockTolerance\n\n public TimeSpan ExpirationTimeClockTolerance { get; set; }\n\nClock tolerance for the expiration check.\nCauses a JWT to pass validation up to this duration after it really expired;\nthis is to allow for possible local-client clock skew. Defaults to zero seconds.\n\n### ForceGoogleCertRefresh\n\n public bool ForceGoogleCertRefresh { get; set; }\n\nOptional. If true forces new certificates to be downloaded from Google. Defaults to false.\n\n### HostedDomain\n\n public string HostedDomain { get; set; }\n\nThe required GSuite domain of the user; or `null` to suppress hosted domain validation.\n\n### IssuedAtClockTolerance\n\n public TimeSpan IssuedAtClockTolerance { get; set; }\n\nClock tolerance for the issued-at check.\nCauses a JWT to pass validation up to this duration before it is really valid;\nthis is to allow for possible local-client clock skew. Defaults to 30 seconds.\n\nExtension Method\n----------------\n\n[Utilities.ThrowIfNull\\\u003cT\\\u003e(T, string)](/dotnet/docs/reference/Google.Apis/latest/Google.Apis.Util.Utilities#Google_Apis_Util_Utilities_ThrowIfNull__1___0_System_String_)"]]
