Struct TokenValidation 

pub struct TokenValidation {
    pub issuer: Option<String>,
    pub audience: Option<String>,
    pub required_scopes: Vec<String>,
    pub validate_exp: bool,
    pub leeway_seconds: u64,
    pub required_claims: Vec<String>,
    pub allowed_algorithms: Vec<String>,
}

JWT validation configuration.

Fields

issuer: Option<String>

Expected issuer (iss claim).

audience: Option<String>

Expected audience (aud claim).

required_scopes: Vec<String>

Required scopes (space-separated in scope claim).

validate_exp: bool

Whether to validate expiration.

leeway_seconds: u64

Clock skew tolerance in seconds for time validation.

required_claims: Vec<String>

Custom claims that must be present.

allowed_algorithms: Vec<String>

Accepted signing algorithms by name (e.g. "RS256").

When non-empty, the token header’s alg must be one of these, letting the relying party pin acceptable algorithms rather than trusting the value in the token header (RFC 8725 §3.1). Empty accepts any supported algorithm.

Implementations

impl TokenValidation

pub fn new() -> Self

Create a new validation configuration with defaults.

pub fn with_issuer(self, issuer: impl Into<String>) -> Self

Set the expected issuer.

pub fn with_audience(self, audience: impl Into<String>) -> Self

Set the expected audience.

pub fn with_required_scope(self, scope: impl Into<String>) -> Self

Add a required scope.

pub fn with_required_scopes( self, scopes: impl IntoIterator<Item = impl Into<String>>, ) -> Self

Set multiple required scopes.

pub const fn with_leeway(self, seconds: u64) -> Self

Set the clock skew leeway.

pub const fn without_exp_validation(self) -> Self

Disable expiration validation (not recommended).

pub fn with_required_claim(self, claim: impl Into<String>) -> Self

Add a required custom claim.

pub fn with_allowed_algorithms( self, algorithms: impl IntoIterator<Item = impl Into<String>>, ) -> Self

Restrict accepted signing algorithms to the given names (e.g. "RS256").

Pins the algorithms the relying party will accept so a token cannot dictate its own verification algorithm (RFC 8725 §3.1).

Trait Implementations

impl Clone for TokenValidation

fn clone(&self) -> TokenValidation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenValidation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TokenValidation

fn default() -> TokenValidation

Returns the “default value” for a type.