RoutexTicketIssuer

constructor(apiKeyId: String, apiKeySecret: ByteArray, ttl: Duration = DEFAULT_TTL)

apiKeyId

Identifier of the API key, set as the JWT kid header so the routex backend can pick the correct verifying key.

apiKeySecret

HMAC-SHA256 key bytes; the issuer never logs or otherwise exposes it.

ttl

Default time-to-live applied to every issued ticket unless the call site supplies its own override.

constructor(apiKeyId: String, base64Secret: String, ttl: Duration = DEFAULT_TTL)

Convenience constructor that decodes base64Secret as standard Base64.

apiKeyId

Identifier of the API key, set as the JWT kid header so the routex backend can pick the correct verifying key.

base64Secret

HMAC-SHA256 key bytes encoded as standard Base64; the issuer never logs or otherwise exposes it.

ttl

Default time-to-live applied to every issued ticket unless the call site supplies its own override.

if base64Secret is not valid Base64.