--- title: Token Validation --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Token Validation #### Token ValidationConfiguration ##### [List token validation configurations](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/configuration/methods/list) client.TokenValidation.Configuration.List(ctx, params) (\*V4PagePaginationArray\[[TokenConfig]()], error) GET/zones/{zone\_id}/token\_validation/config ##### [Get a token validation configuration](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/configuration/methods/get) client.TokenValidation.Configuration.Get(ctx, configID, query) (\*[TokenConfig](), error) GET/zones/{zone\_id}/token\_validation/config/{config\_id} ##### [Create a token validation configuration](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/configuration/methods/create) client.TokenValidation.Configuration.New(ctx, params) (\*[TokenConfig](), error) POST/zones/{zone\_id}/token\_validation/config ##### [Edit a token validation configuration](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/configuration/methods/edit) client.TokenValidation.Configuration.Edit(ctx, configID, params) (\*[ConfigurationEditResponse](), error) PATCH/zones/{zone\_id}/token\_validation/config/{config\_id} ##### [Delete a token validation configuration](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/configuration/methods/delete) client.TokenValidation.Configuration.Delete(ctx, configID, body) (\*[ConfigurationDeleteResponse](), error) DELETE/zones/{zone\_id}/token\_validation/config/{config\_id} ##### ModelsExpand Collapse
type TokenConfig struct{…} ID string UUID. maxLength36 minLength36 Link to this property CreatedAt Time formatdate-time Link to this property
Credentials TokenConfigCredentials
Keys \[]TokenConfigCredentialsKey One of the following:
type TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSA struct{…} JSON representation of an RSA key.
Alg TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg Algorithm One of the following: const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs256 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS256" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs384 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS384" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs512 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS512" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs256 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS256" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs384 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS384" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs512 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS512" Link to this property
Link to this property E string RSA exponent Link to this property Kid string Key ID Link to this property Kty TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAKty Key Type Link to this property N string RSA modulus Link to this property
Link to this property
type TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256 struct{…} JSON representation of an ES256 key Alg TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Alg Algorithm Link to this property Crv TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Crv Curve Link to this property Kid string Key ID Link to this property Kty TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Kty Key Type Link to this property X string X EC coordinate Link to this property Y string Y EC coordinate Link to this property
Link to this property
type TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384 struct{…} JSON representation of an ES384 key Alg TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Alg Algorithm Link to this property Crv TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Crv Curve Link to this property Kid string Key ID Link to this property Kty TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Kty Key Type Link to this property X string X EC coordinate Link to this property Y string Y EC coordinate Link to this property
Link to this property
type TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponse struct{…} JSON representation of a symmetric verification key in API responses (secret material is redacted).
Alg TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlg Algorithm One of the following: const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlgHs256 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlg = "HS256" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlgHs384 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlg = "HS384" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlgHs512 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlg = "HS512" Link to this property
Link to this property Kid string Key ID Link to this property Kty TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseKty Key Type Link to this property
Link to this property
Link to this property
Link to this property Description string maxLength500 Link to this property LastUpdated Time formatdate-time Link to this property Title string maxLength50 Link to this property TokenSources \[]string Link to this property TokenType TokenConfigTokenType Link to this property
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(model)%20token_config%20%3E%20(schema)>) #### Token ValidationConfigurationCredentials ##### [Replace token validation credentials](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/configuration/subresources/credentials/methods/update) client.TokenValidation.Configuration.Credentials.Update(ctx, configID, params) (\*[ConfigurationCredentialUpdateResponse](), error) PUT/zones/{zone\_id}/token\_validation/config/{config\_id}/credentials ##### [Edit token validation credentials](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/configuration/subresources/credentials/methods/edit) client.TokenValidation.Configuration.Credentials.Edit(ctx, configID, params) (\*[ConfigurationCredentialEditResponse](), error) PATCH/zones/{zone\_id}/token\_validation/config/{config\_id}/credentials #### Token ValidationRules ##### [List token validation rules](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/rules/methods/list) client.TokenValidation.Rules.List(ctx, params) (\*V4PagePaginationArray\[[TokenValidationRule]()], error) GET/zones/{zone\_id}/token\_validation/rules ##### [Create a token validation rule](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/rules/methods/create) client.TokenValidation.Rules.New(ctx, params) (\*[TokenValidationRule](), error) POST/zones/{zone\_id}/token\_validation/rules ##### [Create token validation rules](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/rules/methods/bulk_create) client.TokenValidation.Rules.BulkNew(ctx, params) (\*SinglePage\[[TokenValidationRule]()], error) POST/zones/{zone\_id}/token\_validation/rules/bulk ##### [Edit token validation rules](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/rules/methods/bulk_edit) client.TokenValidation.Rules.BulkEdit(ctx, params) (\*SinglePage\[[TokenValidationRule]()], error) PATCH/zones/{zone\_id}/token\_validation/rules/bulk ##### [Get a token validation rule](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/rules/methods/get) client.TokenValidation.Rules.Get(ctx, ruleID, query) (\*[TokenValidationRule](), error) GET/zones/{zone\_id}/token\_validation/rules/{rule\_id} ##### [Delete a token validation rule](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/rules/methods/delete) client.TokenValidation.Rules.Delete(ctx, ruleID, body) (\*[RuleDeleteResponse](), error) DELETE/zones/{zone\_id}/token\_validation/rules/{rule\_id} ##### [Edit a token validation rule](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/rules/methods/edit) client.TokenValidation.Rules.Edit(ctx, ruleID, params) (\*[TokenValidationRule](), error) PATCH/zones/{zone\_id}/token\_validation/rules/{rule\_id} ##### ModelsExpand Collapse
type TokenValidationRule struct{…} A Token Validation rule that can enforce security policies using JWT Tokens.
Action TokenValidationRuleAction Action to take on requests that match operations included in selector and fail expression. One of the following: const TokenValidationRuleActionLog TokenValidationRuleAction = "log" Link to this property const TokenValidationRuleActionBlock TokenValidationRuleAction = "block" Link to this property
Link to this property Description string A human-readable description that gives more details than title. maxLength500 Link to this property Enabled bool Toggle rule on or off. Link to this property Expression string Rule expression. Requests that fail to match this expression will be subject to action. For details on expressions, see the Cloudflare Docs. Link to this property
Selector TokenValidationRuleSelector Select operations covered by this rule. For details on selectors, see the Cloudflare Docs.
Exclude \[]TokenValidationRuleSelectorExcludeOptional Ignore operations that were otherwise included by include. OperationIDs \[]stringOptional Excluded operation IDs. Link to this property
Link to this property
Include \[]TokenValidationRuleSelectorIncludeOptional Select all matching operations. Host \[]stringOptional Included hostnames. Link to this property
Link to this property
Link to this property Title string A human-readable name for the rule. maxLength50 Link to this property ID stringOptional UUID. maxLength36 minLength36 Link to this property CreatedAt TimeOptional formatdate-time Link to this property LastUpdated TimeOptional formatdate-time Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(model)%20token_validation_rule%20%3E%20(schema)>)