Struct TokenValidator 

pub struct TokenValidator { /* private fields */ }

Token validator with JWKS support

Implementations

impl TokenValidator

pub fn new(issuer: &str, audience: &str) -> Self

Create a new token validator

pub fn with_jwks_uri(issuer: &str, audience: &str, jwks_uri: &str) -> Self

Create a new token validator with JWKS URI for signature verification

pub fn with_clock_skew(self, seconds: i64) -> Self

Set clock skew tolerance

pub fn validate_claims( &self, claims: &IdTokenClaims, expected_nonce: Option<&str>, ) -> Result<()>

Validate ID token claims (without cryptographic verification)

Note: For production, you should also verify the JWT signature using the provider’s JWKS.

pub async fn decode_and_verify_jwt(&self, token: &str) -> Result<IdTokenClaims>

Decode and verify JWT token with signature verification

This method verifies the JWT signature using JWKS before trusting the claims.

pub fn decode_jwt_claims(&self, token: &str) -> Result<IdTokenClaims>

Decode JWT without verification (for extracting claims)

NOTE: This does not verify the signature. Use decode_and_verify_jwt() for production.