Struct TokenValidator 

pub struct TokenValidator { /* private fields */ }

Token validator

Implementations

impl TokenValidator

pub fn new(issuer: &str, audience: &str) -> Self

Create a new token validator

pub fn with_clock_skew(self, seconds: i64) -> Self

Set clock skew tolerance

pub fn validate_claims( &self, claims: &IdTokenClaims, expected_nonce: Option<&str>, ) -> Result<()>

Validate ID token claims (without cryptographic verification)

Note: For production, you should also verify the JWT signature using the provider’s JWKS.

pub fn decode_jwt_claims(token: &str) -> Result<IdTokenClaims>

Decode JWT without verification (for extracting claims)

WARNING: This does not verify the signature. For production use, you should use a proper JWT library that verifies signatures.