Short-Lived JWT Token Enforcement for Inference Engines

Security Requirement

Inference engines MUST enforce short-lived JWT access tokens with a maximum TTL of 15 minutes. Tokens MUST be validated against the IdP's JWKS endpoint on every request.

Required JWT Claims Validation

Every request to the inference engine must include a JWT with the following validated claims: