text: # Security configuration in light framework.
  ---
  # Enable JWT verification flag.
  enableVerifyJwt: false
  
  # Enable JWT scope verification. Only valid when enableVerifyJwt is true.
  enableVerifyScope: true
  
  # User for test only. should be always be false on official environment.
  enableMockJwt: false
  
  # JWT signature public certificates. kid and certificate path mappings.
  jwt:
    certificate:
      '100': primary.crt
      '101': secondary.crt
    clockSkewInSeconds: 60
  
  # Enable or disable JWT token logging
  logJwtToken: true
  
  # Enable or disable client_id, user_id and scope logging.
  logClientUserScope: false
  
  # If OAuth2 provider support http2 protocol. If using light-oauth2, set this to true.
  oauthHttp2Support: true
  
  # Enable JWT token cache to speed up verification. This will only verify expired time
  # and skip the signature verification as it takes more CPU power and long time.
  enableJwtCache: true
  