GenerateJWT generates a serialized unpause JWT with the provided claims.

NewJWTSigner loads the HMAC key from the provided configuration and returns a new JWT signer.

RedeemJWT deserializes an unpause JWT and returns the validated claims.

Changing this value will invalidate all existing JWTs.

BatchSize is the maximum number of identifiers that the SA will unpause in a single batch.

MaxBatches is the maximum number of batches that the SA will unpause in a single request.

RequestLimit is the maximum number of identifiers that the SA will unpause in a single request.

ErrMalformedJWT is returned when the JWT is malformed.

JWTClaims represents the claims of a JWT token issued by the WFE for redemption by the SFE.

JWTSigner is a type alias for jose.Signer.