---
title: Token Validation
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api/terraform)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Token Validation
#### Token ValidationConfiguration
#### resource cloudflare\_token\_validation\_config
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>)
token\_type: String
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20token_type>)
credentials: Attributes
Request payload for create and PUT credentials operations. Provided keys define the complete stored key set. Key identities ({alg,kid}) must be unique.
keys: List\[Attributes]
alg: String
Algorithm
Link to this property
e?: String
RSA exponent
Link to this property
kid: String
Key ID
Link to this property
kty: String
Key Type
Link to this property
n?: String
RSA modulus
Link to this property
crv?: String
Curve
Link to this property
x?: String
X EC coordinate
Link to this property
y?: String
Y EC coordinate
Link to this property
k?: String
Symmetric key material. Required for create and PUT update requests.
Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20credentials>)
description: String
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20description>)
title: String
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20title>)
token\_sources: List\[String]
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20token_sources>)
##### computed Expand Collapse
id: String
UUID.
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>)
last\_updated: Time
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_updated>)
### cloudflare\_token\_validation\_config
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_token_validation_config" "example_token_validation_config" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
credentials = {
keys = [{
alg = "RS256"
e = "e"
kid = "kid"
kty = "RSA"
n = "n"
}]
}
description = "Long description for Token Validation Configuration"
title = "Example Token Validation Configuration"
token_sources = ["http.request.headers[\"x-auth\"][0]", "http.request.cookies[\"Authorization\"][0]"]
token_type = "JWT"
}
```
#### data cloudflare\_token\_validation\_config
##### required Expand Collapse
config\_id: String
UUID.
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20config_id>)
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>)
##### computed Expand Collapse
id: String
UUID.
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>)
description: String
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20description>)
last\_updated: Time
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_updated>)
title: String
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20title>)
token\_type: String
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20token_type>)
token\_sources: List\[String]
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20token_sources>)
credentials: Attributes
keys: List\[Attributes]
alg: String
Algorithm
Link to this property
e: String
RSA exponent
Link to this property
kid: String
Key ID
Link to this property
kty: String
Key Type
Link to this property
n: String
RSA modulus
Link to this property
crv: String
Curve
Link to this property
x: String
X EC coordinate
Link to this property
y: String
Y EC coordinate
Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20credentials>)
### cloudflare\_token\_validation\_config
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_token_validation_config" "example_token_validation_config" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
config_id = "4a7ee8d3-dd63-4ceb-9d5f-c27831854ce7"
}
```
#### data cloudflare\_token\_validation\_configs
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20zone_id>)
##### optional Expand Collapse
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
UUID.
Link to this property
created\_at: Time
Link to this property
credentials: Attributes
keys: List\[Attributes]
alg: String
Algorithm
Link to this property
e: String
RSA exponent
Link to this property
kid: String
Key ID
Link to this property
kty: String
Key Type
Link to this property
n: String
RSA modulus
Link to this property
crv: String
Curve
Link to this property
x: String
X EC coordinate
Link to this property
y: String
Y EC coordinate
Link to this property
Link to this property
Link to this property
description: String
Link to this property
last\_updated: Time
Link to this property
title: String
Link to this property
token\_sources: List\[String]
Link to this property
token\_type: String
Link to this property
[Link to this property](<#(resource)%20token_validation.configuration%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_token\_validation\_configs
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_token_validation_configs" "example_token_validation_configs" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
}
```
#### Token ValidationRules
#### resource cloudflare\_token\_validation\_rules
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>)
action: String
Action to take on requests that match operations included in `selector` and fail `expression`.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20action>)
description: String
A human-readable description that gives more details than `title`.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20description>)
enabled: Bool
Toggle rule on or off.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20enabled>)
expression: String
Rule expression. Requests that fail to match this expression will be subject to `action`.
For details on expressions, see the [Cloudflare Docs](https://developers.cloudflare.com/api-shield/security/jwt-validation/).
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20expression>)
title: String
A human-readable name for the rule.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20title>)
selector: Attributes
Select operations covered by this rule.
For details on selectors, see the Cloudflare Docs.
exclude?: List\[Attributes]
Ignore operations that were otherwise included by include.
operation\_ids?: List\[String]
Excluded operation IDs.
Link to this property
Link to this property
include?: List\[Attributes]
Select all matching operations.
host?: List\[String]
Included hostnames.
Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20selector>)
##### optional Expand Collapse
position?: Attributes
Update rule order among zone rules.
index?: Int64
Move rule to this position
Link to this property
before?: String
Move rule to before rule with this ID.
Link to this property
after?: String
Move rule to after rule with this ID.
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20position>)
##### computed Expand Collapse
id: String
UUID.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
created\_at: Time
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_at>)
last\_updated: Time
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_updated>)
### cloudflare\_token\_validation\_rules
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_token_validation_rules" "example_token_validation_rules" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
action = "log"
description = "Long description for Token Validation Rule"
enabled = true
expression = "is_jwt_valid(\"52973293-cb04-4a97-8f55-e7d2ad1107dd\") or is_jwt_valid(\"46eab8d1-6376-45e3-968f-2c649d77d423\")"
selector = {
exclude = [{
operation_ids = ["f9c5615e-fe15-48ce-bec6-cfc1946f1bec", "56828eae-035a-4396-ba07-51c66d680a04"]
}]
include = [{
host = ["v1.example.com", "v2.example.com"]
}]
}
title = "Example Token Validation Rule"
}
```
#### data cloudflare\_token\_validation\_rules
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>)
##### optional Expand Collapse
rule\_id?: String
UUID.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20rule_id>)
filter?: Attributes
id?: String
Select rules with these IDs.
Link to this property
action?: String
Action to take on requests that match operations included in selector and fail expression.
Link to this property
enabled?: Bool
Toggle rule on or off.
Link to this property
host?: String
Select rules with this host in include.
Link to this property
hostname?: String
Select rules with this host in include.
Link to this property
token\_configuration?: List\[String]
Select rules using any of these token configurations.
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>)
##### computed Expand Collapse
id: String
UUID.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
action: String
Action to take on requests that match operations included in `selector` and fail `expression`.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20action>)
created\_at: Time
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_at>)
description: String
A human-readable description that gives more details than `title`.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20description>)
enabled: Bool
Toggle rule on or off.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20enabled>)
expression: String
Rule expression. Requests that fail to match this expression will be subject to `action`.
For details on expressions, see the [Cloudflare Docs](https://developers.cloudflare.com/api-shield/security/jwt-validation/).
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20expression>)
last\_updated: Time
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_updated>)
title: String
A human-readable name for the rule.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20title>)
selector: Attributes
Select operations covered by this rule.
For details on selectors, see the Cloudflare Docs.
exclude: List\[Attributes]
Ignore operations that were otherwise included by include.
operation\_ids: List\[String]
Excluded operation IDs.
Link to this property
Link to this property
include: List\[Attributes]
Select all matching operations.
host: List\[String]
Included hostnames.
Link to this property
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20selector>)
### cloudflare\_token\_validation\_rules
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_token_validation_rules" "example_token_validation_rules" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
rule_id = "4a7ee8d3-dd63-4ceb-9d5f-c27831854ce7"
}
```
#### data cloudflare\_token\_validation\_rules\_list
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20zone_id>)
##### optional Expand Collapse
action?: String
Action to take on requests that match operations included in `selector` and fail `expression`.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20action>)
enabled?: Bool
Toggle rule on or off.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20enabled>)
host?: String
Select rules with this host in `include`.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20host>)
hostname?: String
Select rules with this host in `include`.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20hostname>)
id?: String
Select rules with these IDs.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20id>)
rule\_id?: String
Select rules with these IDs.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20rule_id>)
token\_configuration?: List\[String]
Select rules using any of these token configurations.
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20token_configuration>)
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
action: String
Action to take on requests that match operations included in selector and fail expression.
Link to this property
description: String
A human-readable description that gives more details than title.
Link to this property
enabled: Bool
Toggle rule on or off.
Link to this property
expression: String
Rule expression. Requests that fail to match this expression will be subject to action.
For details on expressions, see the Cloudflare Docs.
Link to this property
selector: Attributes
Select operations covered by this rule.
For details on selectors, see the Cloudflare Docs.
exclude: List\[Attributes]
Ignore operations that were otherwise included by include.
operation\_ids: List\[String]
Excluded operation IDs.
Link to this property
Link to this property
include: List\[Attributes]
Select all matching operations.
host: List\[String]
Included hostnames.
Link to this property
Link to this property
Link to this property
title: String
A human-readable name for the rule.
Link to this property
id: String
UUID.
Link to this property
created\_at: Time
Link to this property
last\_updated: Time
Link to this property
[Link to this property](<#(resource)%20token_validation.rules%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_token\_validation\_rules\_list
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_token_validation_rules_list" "example_token_validation_rules_list" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
action = "log"
enabled = true
host = "www.example.com"
hostname = "www.example.com"
rule_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
token_configuration = ["f174e90a-fafe-4643-bbbc-4a0ed4fc8415"]
}
```