Struct Verifier 

pub struct Verifier { /* private fields */ }

What a verifier requires of a token.

Implementations

impl Verifier

pub fn new( trusted_keys: Vec<PublicKeyBytes>, expected_issuer: impl Into<String>, expected_audience: impl Into<String>, ) -> ActResult<Self>

Builds a verifier.

Errors

Returns ActError::NoTrustedKeys if trusted_keys is empty, since no token could then ever verify and the misconfiguration should surface at construction rather than as a stream of signature failures.

pub fn requiring_scopes(self, scopes: impl IntoIterator<Item = Scope>) -> Self

Requires that the token grant every scope in scopes.

pub fn with_leeway_seconds(self, seconds: i64) -> Self

Allows seconds of clock skew on the nbf and exp checks.

Applied symmetrically. Callers running across hosts without tightly synchronized clocks need a small allowance here; leaving it at zero makes a token minted moments ago fail at a verifier whose clock trails the issuer’s.

pub fn with_clock(self, now_unix_seconds: i64) -> Self

Pins the time used for temporal checks, in seconds since the Unix epoch.

Intended for tests and for replaying a decision at a known instant.

Trait Implementations

impl Clone for Verifier

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Verifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.