The type of the principal value produced by mapClaims.
OptionalalgorithmsAllowed algorithms (default: ['HS256']).
OptionalaudienceExpected audience — if set, aud must include it.
OptionalclockClock tolerance in seconds for exp/nbf checks (default: 0).
OptionalissuerExpected issuer — if set, iss must match.
Map raw JWT claims to the typed principal value.
OptionalnameCustom scheme name (default: 'jwt').
HMAC secret (for HS256/HS384/HS512) or PEM public key (for RS256/RS384/RS512).
Configuration for jwtScheme.