Struct JwtVerifierConfig 

pub struct JwtVerifierConfig {
    pub issuer: String,
    pub audience: String,
    pub jwks_url: String,
    pub jwks_ttl: Duration,
    pub leeway_secs: u64,
    pub enforce: bool,
}

Configuration resolved at startup from env vars.

Fields

issuer: String

Expected iss claim.

audience: String

Expected aud claim.

jwks_url: String

Absolute URL of the JWKS document (typically https://auth.<host>/.well-known/jwks.json).

jwks_ttl: Duration

Duration a cached JWKS document is trusted without a refresh.

leeway_secs: u64

Clock-skew leeway in seconds applied to exp / nbf / iat.

enforce: bool

When true, missing JWTs cause a 401; when false (default for pre-10.e deployments still rolling out), the middleware falls back to header-based + unverified-payload extraction with a warning log. Production deployments flip this to true in 10.j.

Implementations

impl JwtVerifierConfig

pub fn from_env() -> Option<Self>

Build the config from env vars, returning None when the JWKS URL is unset — the middleware treats None as “no verifier configured” and keeps the legacy behaviour for tests / OSS users.

Trait Implementations

impl Clone for JwtVerifierConfig

fn clone(&self) -> JwtVerifierConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtVerifierConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.