Enum VerifyError 

pub enum VerifyError {
    InvalidFormat,
    SignatureInvalid,
    Expired,
    IssuerInvalid,
    AudienceInvalid,
    MissingClaim(&'static str),
    KeysetUnavailable,
    Other(String),
}

Verification failure surface.

One variant per logical failure class. The PAS-engine variants (SignatureInvalid, Expired, IssuerMismatch, AudienceMismatch, MissingClaim, KeysetUnavailable) reflect the boundary contract: audit logs map them 1:1 to engine AuthError rows. Adapter-side variants (InvalidFormat) cover failures upstream of engine entry.

Variants

InvalidFormat

Bearer string did not parse as a JWS Compact serialization. Adapter-side reject before engine entry.

SignatureInvalid

Cryptographic signature verification failed (engine M16).

Expired

exp claim is in the past (engine M19).

IssuerInvalid

iss did not match Expectations::issuer (engine M23). The engine does not expose the actual value because the failed match means we cannot trust any payload field — the SDK surfaces just “issuer invalid” and the audit log carries the caller’s expected value alongside this variant.

AudienceInvalid

aud did not match Expectations::audience (engine M21/M22).

MissingClaim(&'static str)

A required claim was absent or malformed.

KeysetUnavailable

JWKS fetch failed and there is no usable cached snapshot (initial bootstrap failure or with_initial constructed with an empty key set). Distinct from SignatureInvalid so audit logs distinguish “we couldn’t even attempt verification” from “verification failed.”

Other(String)

Catch-all for engine variants that don’t map to a structural SDK rejection. Carries the engine’s AuthError Display so the audit log retains the M-code.

Trait Implementations

impl Clone for VerifyError

fn clone(&self) -> VerifyError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for VerifyError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for VerifyError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for VerifyError

fn eq(&self, other: &VerifyError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for VerifyError

impl StructuralPartialEq for VerifyError