Struct AuthDispatcher 

pub struct AuthDispatcher { /* private fields */ }

Central dispatcher for JWT and opaque token validation

Orchestrates key providers and claims plugins to validate tokens using a single configured plugin.

Implementations

impl AuthDispatcher

pub fn new( validation_config: ValidationConfig, config: &AuthConfig, registry: &PluginRegistry, ) -> Result<Self, ConfigError>

Create a new dispatcher with validation config and plugin.

Errors

Returns ConfigError::UnknownPlugin if the configured provider is not in the registry.

pub fn with_key_provider(self, provider: Arc<dyn KeyProvider>) -> Self

Add a key provider

pub fn with_introspection_provider( self, provider: Arc<dyn IntrospectionProvider>, ) -> Self

Add an introspection provider

pub async fn validate_jwt(&self, token: &str) -> Result<Claims, ClaimsError>

Validate a JWT token.

Workflow:

1. Try each KeyProvider until one successfully validates the signature
2. Extract issuer from token
3. Use the configured plugin to normalize claims
4. Run common validation (issuer, audience, exp, nbf, UUIDs)
5. Return normalized claims

Errors

Returns ClaimsError if signature validation, claim normalization, or validation fails.

pub async fn validate_opaque(&self, token: &str) -> Result<Claims, ClaimsError>

Validate an opaque token via introspection

Workflow:

1. Try each IntrospectionProvider until one succeeds
2. Extract issuer from introspection response
3. Use the configured plugin to normalize claims
4. Run common validation
5. Return normalized claims

Errors

Returns ClaimsError if introspection, claim normalization, or validation fails.

pub fn validation_config(&self) -> &ValidationConfig

Get validation config (for inspection/testing)

pub fn plugin(&self) -> &Arc<dyn ClaimsPlugin>

Get the configured authentication plugin (for inspection/testing)

pub async fn refresh_keys(&self) -> Result<(), Vec<ClaimsError>>

Trigger key refresh for all key providers.

Errors

Returns a vector of ClaimsError if any provider fails to refresh keys.

Trait Implementations

impl TokenValidator for AuthDispatcher

Implement TokenValidator trait for AuthDispatcher

fn validate_and_parse<'life0, 'life1, 'async_trait>( &'life0 self, token: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Claims, AuthError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Validate a JWT token and return normalized claims