# OAuthClientAssertionOptions (/docs/auth/api/interfaces/OAuthClientAssertionOptions)



[@kysoql/auth](/docs/auth/api) / OAuthClientAssertionOptions

Options for creating a private\_key\_jwt client assertion for Salesforce
OAuth.

## Properties [#properties]

| Property                                                     | Modifier   | Type                                                             | Description                                                                                          |
| ------------------------------------------------------------ | ---------- | ---------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- |
| <a id="api-property-clientid" /> `clientId`                  | `readonly` | `string`                                                         | Connected App consumer key / OAuth client ID.                                                        |
| <a id="api-property-loginurl" /> `loginUrl`                  | `readonly` | `string`                                                         | Salesforce login/My Domain or Experience Cloud base URL whose token endpoint receives the assertion. |
| <a id="api-property-privatekey" /> `privateKey`              | `readonly` | [`PrivateKeyInput`](/docs/auth/api/type-aliases/PrivateKeyInput) | RS256 signing key with an explicit source type.                                                      |
| <a id="api-property-expiresinseconds" /> `expiresInSeconds?` | `readonly` | `number`                                                         | Default: 180 seconds. Maximum: 300 seconds.                                                          |
| <a id="api-property-now" /> `now?`                           | `readonly` | `number`                                                         | Unix timestamp in seconds. Defaults to the current time. Useful for deterministic tests.             |