Struct JwtConfig 

pub struct JwtConfig {
    pub decoding_key: DecodingKey,
    pub encoding_key: Option<EncodingKey>,
    pub algorithm: Algorithm,
    pub required_issuer: Option<String>,
    pub accepted_audiences: Vec<String>,
    pub leeway_secs: u64,
    pub public_key_pem: Option<Vec<u8>>,
}

Configuration for JWT validation and (optionally) issuance.

Fields

decoding_key: DecodingKey

Public key for validation.

encoding_key: Option<EncodingKey>

Private key for issuance (only on orchestrator).

algorithm: Algorithm

Signing algorithm (ES256 or HS256).

required_issuer: Option<String>

Expected iss claim (optional — skipped if None).

accepted_audiences: Vec<String>

Accepted aud claim values. A token whose aud matches any entry in this list passes audience validation; the per-tool scope check downstream still gates the actual call.

Single-element vec preserves v0.7.x single-audience behaviour. For multi-audience deployments (e.g. proxy accepting both ati-proxy and per-MCP-audience tokens — see issue #121), populate from ATI_JWT_ACCEPTED_AUDIENCES (CSV env var).

leeway_secs: u64

Clock skew tolerance in seconds.

public_key_pem: Option<Vec<u8>>

Raw public key PEM bytes (for JWKS endpoint).

Trait Implementations

impl Clone for JwtConfig

fn clone(&self) -> JwtConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.