Struct JwtIdTokenVerifier 

pub struct JwtIdTokenVerifier { /* private fields */ }

Concrete verifier: validates iss/aud/exp and nonce against a set of provider public keys the app has fetched from the JWKS endpoint.

Implementations

impl JwtIdTokenVerifier

pub fn new(issuer: impl Into<String>, audience: impl Into<String>) -> Self

issuer must equal the provider’s iss; audience is this app’s OIDC client id (the token’s aud).

pub fn add_rsa_pem( self, kid: Option<String>, alg: Algorithm, pem: &str, ) -> Result<Self>

Add an RSA public key (PEM) from the provider JWKS, tagged with its kid.

pub fn add_ec_pem( self, kid: Option<String>, alg: Algorithm, pem: &str, ) -> Result<Self>

Add an EC public key (PEM), tagged with its kid.

Trait Implementations

impl IdTokenVerifier for JwtIdTokenVerifier

fn verify<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, id_token: &'life1 str, expected_nonce: Option<&'life2 str>, ) -> Pin<Box<dyn Future<Output = Result<VerifiedIdToken>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Verify signature + iss/aud/exp and, when expected_nonce is set, that the token’s nonce matches. Returns the trusted claims.