Struct ValidationConfig 

pub struct ValidationConfig {
    pub allowed_iss: OneOrVec<Iss>,
    pub allowed_aud: OneOrVec<Aud>,
    pub validate_exp: bool,
    pub validate_nbf: bool,
    pub leeway_seconds: u64,
    pub allow_missing_jwk_alg_parameter: bool,
}

ID token verifier validation configuration.

Fields

allowed_iss: OneOrVec<Iss>

Allowed Iss that an ID token must match.

WARNING: setting this field to an empty OneOrVec::Vec disables the iss validation. This is an insecure option, please make sure you understand what you are doing.

Mandatory during deserialization.

allowed_aud: OneOrVec<Aud>

Allowed Aud that an ID token must match.

WARNING: setting this field to an empty OneOrVec::Vec disables the aud validation. This is an insecure option, please make sure you understand what you are doing.

Mandatory during deserialization.

validate_exp: bool

Whether to force exp field validation.

WARNING: setting this field false disables the exp validation.

Defaults to true during deserialization.

validate_nbf: bool

Whether to force nbf field validation.

Defaults to false during deserialization.

leeway_seconds: u64

Leeway for exp and nbf validation to account for clock skew.

Default to 60 during deserialization.

allow_missing_jwk_alg_parameter: bool

Whether verifier should not fail validation if the JWK lacks the alg parameter.

You may want to set this field to true if the provided JWKS do not have the alg parameter, such as in https://login.microsoftonline.com/common/discovery/v2.0/keys.

Defaults to false during deserialization.

Implementations

impl ValidationConfig

pub fn builder() -> ValidationConfigBuilder

Create an instance of ValidationConfig using the builder syntax

Trait Implementations

impl Clone for ValidationConfig

fn clone(&self) -> ValidationConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ValidationConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ValidationConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ValidationConfig

fn eq(&self, other: &ValidationConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ValidationConfig