Struct JwtValidator 

pub struct JwtValidator { /* private fields */ }

The set of claim checks applied after a JWT’s signature verifies.

All checks are opt-in except signature and exp: if you set no issuer, the iss claim is not checked; likewise for audience. For anything beyond a demo, set both.

Implementations

impl JwtValidator

pub fn new() -> JwtValidator

Creates a validator that checks signature and exp only.

pub fn with_issuer(self, issuer: impl Into<String>) -> JwtValidator

Requires the token’s iss to equal one of the accepted issuers.

pub fn with_audience(self, audience: impl Into<String>) -> JwtValidator

Requires the token’s aud to contain one of the accepted audiences.

pub const fn with_leeway(self, leeway: Duration) -> JwtValidator

Sets the clock-skew leeway for exp/nbf (default 60 s).

pub const fn allow_missing_exp(self) -> JwtValidator

Allows tokens without an exp claim (default: exp is required).

pub fn with_hs256_secret(self, secret: impl Into<Vec<u8>>) -> JwtValidator

Sets a shared secret for verifying HS256 tokens.

HS256 is only ever checked against this secret — never against a JWKS public key — which is what makes the RS256→HS256 confusion attack impossible.

Trait Implementations

impl Clone for JwtValidator

fn clone(&self) -> JwtValidator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtValidator

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for JwtValidator

fn default() -> JwtValidator

Returns the “default value” for a type.