--- title: Create a token validation configuration --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Token Validation](https://developers.cloudflare.com/api/go/resources/token_validation) [Configuration](https://developers.cloudflare.com/api/go/resources/token_validation/subresources/configuration) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Create a token validation configuration client.TokenValidation.Configuration.New(ctx, params) (\*[TokenConfig](), error) POST/zones/{zone\_id}/token\_validation/config Creates a JWT validation configuration for the zone. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `Account API Gateway``Domain API Gateway` ##### ParametersExpand Collapse
params ConfigurationNewParams ZoneID param.Field\[string] Path param: Identifier. maxLength32 Link to this property
Credentials param.Field\[ConfigurationNewParamsCredentials] Body param: Request payload for create and PUT credentials operations. Provided keys define the complete stored key set. Key identities ({alg,kid}) must be unique.
Keys \[]ConfigurationNewParamsCredentialsKey One of the following:
type ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSA struct{…} JSON representation of an RSA key.
Alg ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg Algorithm One of the following: const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs256 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS256" Link to this property const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs384 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS384" Link to this property const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs512 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS512" Link to this property const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs256 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS256" Link to this property const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs384 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS384" Link to this property const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs512 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS512" Link to this property
Link to this property E string RSA exponent Link to this property Kid string Key ID Link to this property Kty ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAKty Key Type Link to this property N string RSA modulus Link to this property
Link to this property
type ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256 struct{…} JSON representation of an ES256 key Alg ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Alg Algorithm Link to this property Crv ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Crv Curve Link to this property Kid string Key ID Link to this property Kty ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Kty Key Type Link to this property X string X EC coordinate Link to this property Y string Y EC coordinate Link to this property
Link to this property
type ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384 struct{…} JSON representation of an ES384 key Alg ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Alg Algorithm Link to this property Crv ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Crv Curve Link to this property Kid string Key ID Link to this property Kty ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Kty Key Type Link to this property X string X EC coordinate Link to this property Y string Y EC coordinate Link to this property
Link to this property
type ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequest struct{…} JSON representation of a symmetric key for create/PUT requests.
Alg ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequestAlg Algorithm One of the following: const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequestAlgHs256 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequestAlg = "HS256" Link to this property const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequestAlgHs384 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequestAlg = "HS384" Link to this property const ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequestAlgHs512 ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequestAlg = "HS512" Link to this property
Link to this property K string Symmetric key material. Required for create and PUT update requests. Link to this property Kid string Key ID Link to this property Kty ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyOctRequestKty Key Type Link to this property
Link to this property
Link to this property
Link to this property Description param.Field\[string] Body param maxLength500 Link to this property Title param.Field\[string] Body param maxLength50 Link to this property TokenSources param.Field\[\[]string] Body param Link to this property
TokenType param.Field\[ConfigurationNewParamsTokenType] Body param const ConfigurationNewParamsTokenTypeJWT ConfigurationNewParamsTokenType = "JWT" Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(method)%20create%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type TokenConfig struct{…} ID string UUID. maxLength36 minLength36 Link to this property CreatedAt Time formatdate-time Link to this property
Credentials TokenConfigCredentials
Keys \[]TokenConfigCredentialsKey One of the following:
type TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSA struct{…} JSON representation of an RSA key.
Alg TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg Algorithm One of the following: const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs256 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS256" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs384 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS384" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs512 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "RS512" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs256 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS256" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs384 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS384" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgPs512 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlg = "PS512" Link to this property
Link to this property E string RSA exponent Link to this property Kid string Key ID Link to this property Kty TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyRSAKty Key Type Link to this property N string RSA modulus Link to this property
Link to this property
type TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256 struct{…} JSON representation of an ES256 key Alg TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Alg Algorithm Link to this property Crv TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Crv Curve Link to this property Kid string Key ID Link to this property Kty TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs256Kty Key Type Link to this property X string X EC coordinate Link to this property Y string Y EC coordinate Link to this property
Link to this property
type TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384 struct{…} JSON representation of an ES384 key Alg TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Alg Algorithm Link to this property Crv TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Crv Curve Link to this property Kid string Key ID Link to this property Kty TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyEcEs384Kty Key Type Link to this property X string X EC coordinate Link to this property Y string Y EC coordinate Link to this property
Link to this property
type TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponse struct{…} JSON representation of a symmetric verification key in API responses (secret material is redacted).
Alg TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlg Algorithm One of the following: const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlgHs256 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlg = "HS256" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlgHs384 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlg = "HS384" Link to this property const TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlgHs512 TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseAlg = "HS512" Link to this property
Link to this property Kid string Key ID Link to this property Kty TokenConfigCredentialsKeysAPIShieldCredentialsJWTKeyOctResponseKty Key Type Link to this property
Link to this property
Link to this property
Link to this property Description string maxLength500 Link to this property LastUpdated Time formatdate-time Link to this property Title string maxLength50 Link to this property TokenSources \[]string Link to this property TokenType TokenConfigTokenType Link to this property
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(model)%20token_config%20%3E%20(schema)>) ### Create a token validation configuration Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/option" "github.com/cloudflare/cloudflare-go/token_validation" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) tokenConfig, err := client.TokenValidation.Configuration.New(context.TODO(), token_validation.ConfigurationNewParams{ ZoneID: cloudflare.F("023e105f4ecef8ad9ca31a8372d0c353"), Credentials: cloudflare.F(token_validation.ConfigurationNewParamsCredentials{ Keys: cloudflare.F([]token_validation.ConfigurationNewParamsCredentialsKeyUnion{token_validation.ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSA{ Alg: cloudflare.F(token_validation.ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAAlgRs256), E: cloudflare.F("e"), Kid: cloudflare.F("kid"), Kty: cloudflare.F(token_validation.ConfigurationNewParamsCredentialsKeysAPIShieldCredentialsJWTKeyRSAKtyRSA), N: cloudflare.F("n"), }}), }), Description: cloudflare.F("Long description for Token Validation Configuration"), Title: cloudflare.F("Example Token Validation Configuration"), TokenSources: cloudflare.F([]string{`http.request.headers["x-auth"][0]`, `http.request.cookies["Authorization"][0]`}), TokenType: cloudflare.F(token_validation.ConfigurationNewParamsTokenTypeJWT), }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", tokenConfig.ID) } ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": { "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "created_at": "2014-01-01T05:20:00.12345Z", "credentials": { "keys": [ { "alg": "ES256", "crv": "P-256", "kid": "38013f13-c266-4eec-a72a-92ec92779f21", "kty": "EC", "x": "KN53JRwN3wCjm2o39bvZUX2VdrsHzS8pxOAGjm8m7EQ", "y": "lnkkzIxaveggz-HFhcMWW15nxvOj0Z_uQsXbpK0GFcY" } ] }, "description": "Long description for Token Validation Configuration", "last_updated": "2014-01-01T05:20:00.12345Z", "title": "Example Token Validation Configuration", "token_sources": [ "http.request.headers[\"x-auth\"][0]", "http.request.cookies[\"Authorization\"][0]" ], "token_type": "JWT" }, "success": true } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "result": { "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415", "created_at": "2014-01-01T05:20:00.12345Z", "credentials": { "keys": [ { "alg": "ES256", "crv": "P-256", "kid": "38013f13-c266-4eec-a72a-92ec92779f21", "kty": "EC", "x": "KN53JRwN3wCjm2o39bvZUX2VdrsHzS8pxOAGjm8m7EQ", "y": "lnkkzIxaveggz-HFhcMWW15nxvOj0Z_uQsXbpK0GFcY" } ] }, "description": "Long description for Token Validation Configuration", "last_updated": "2014-01-01T05:20:00.12345Z", "title": "Example Token Validation Configuration", "token_sources": [ "http.request.headers[\"x-auth\"][0]", "http.request.cookies[\"Authorization\"][0]" ], "token_type": "JWT" }, "success": true } ```