Struct JwtVerifier 

pub struct JwtVerifier { /* private fields */ }

Verifies JWT access tokens: signature (with the issuer’s published keys), issuer, audience, expiry and not-before.

The token’s sub becomes the Principal subject, and its scope (space-separated) or scp claim the granted scopes.

use flymcprust_core::auth::JwtVerifier;
use flymcprust_core::transport::http::OAuth;

let resource = "https://mcp.example.com/mcp";
let verifier = JwtVerifier::builder("https://auth.example.com", resource).build()?;
let oauth = OAuth::builder(resource, verifier)
    .authorization_server("https://auth.example.com")
    .build()?;

Implementations

impl JwtVerifier

pub fn builder( issuer: impl Into<String>, audience: impl Into<String>, ) -> JwtVerifierBuilder

Starts a verifier for tokens issued by issuer (exactly as in the tokens’ iss claim) for audience (this server’s canonical URI, the resource of OAuth).

By default the signing keys are discovered from the issuer’s metadata (RFC 8414, then OpenID Connect Discovery).

Trait Implementations

impl Clone for JwtVerifier

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl TokenVerifier for JwtVerifier

fn verify<'a>(&'a self, token: &'a str) -> VerifyFuture<'a>

Verifies token (the value after Bearer ).