Module token 

Attestation Gateway integrity tokens: the JWT that binds a device key to an attested app.

Verification accepts ES256 and nothing else. The algorithm is pinned here rather than read from the token or the JWKS, so neither can choose how the token is checked.

Structs

AttestedDevice

A device the Attestation Gateway attested, from a verified integrity token.

JwksError

The document is not a JWKS.

KeysUnavailable

The issuer’s keys could not be obtained. This is a dependency failure, not the client’s.

StaticKeys

A fixed set of issuer keys.

TokenVerifier

Verifies integrity tokens against trusted issuers and accepted audiences.

Enums

TokenError

Why an integrity token was refused.

TokenVerifierConfigError

A TokenVerifier could not be built from its configuration.

Traits

IssuerKeys

An issuer’s token signing keys, looked up by kid.

Functions

parse_jwks

Parses the ES256 signing keys of a JWKS document, keyed by kid.

Type Aliases

BoxFuture

A boxed, sendable future.