Struct MultiKeyVerifier 

pub struct MultiKeyVerifier { /* private fields */ }

Implementations

impl MultiKeyVerifier

pub fn new( keys: Vec<RotationKey>, issuer: impl Into<String>, audience: impl Into<String>, ) -> MultiKeyVerifier

Create a new multi-key verifier

pub fn from_single_key( key: VerifyingKey, key_id: impl Into<String>, issuer: impl Into<String>, audience: impl Into<String>, ) -> MultiKeyVerifier

Create from a single key (for backward compatibility)

pub fn with_origin_validation(self) -> MultiKeyVerifier

Require origin validation

pub fn with_cleanup_interval(self, interval: Duration) -> MultiKeyVerifier

Set cleanup interval for expired keys

pub async fn add_key(&self, key: RotationKey)

Add a new key to the verifier

pub async fn remove_key(&self, key_id: &str)

Remove a key by ID

pub async fn key_ids(&self) -> Vec<String>

Get all key IDs

pub async fn primary_key_id(&self) -> Option<String>

Get primary key ID

pub async fn verify( &self, token: &str, expected_origin: Option<&str>, expected_client_ip: Option<&str>, ) -> Result<AuthContext, VerifyError>

Verify a token against all keys

pub async fn verify_fast( &self, token: &str, expected_origin: Option<&str>, expected_client_ip: Option<&str>, ) -> Result<AuthContext, VerifyError>

Verify without cleaning up (for high-throughput scenarios)