OAuth 2.0 configuration for DICOMweb authorization.
bool enabled
Enable OAuth 2.0 authorization (disabled by default for backward compat)
std::string audience
Expected audience (aud claim). Empty = skip audience validation.
std::uint32_t clock_skew_seconds
Allowed clock skew in seconds for exp/nbf validation.
std::string jwks_url
JWKS endpoint URL for public key retrieval.
bool allow_unknown_users
Allow unknown OAuth users not found in RBAC to access as Viewer When false (default): unknown users r...
std::string issuer
Expected token issuer (iss claim). Empty = skip issuer validation.
std::vector< std::string > allowed_algorithms
Allowed signing algorithms (default: RS256, ES256)