Struct VerifyConfig 

pub struct VerifyConfig { /* private fields */ }

Implementations

impl VerifyConfig

pub fn id_token( issuer: impl Into<String>, audience: impl Into<String>, expected_nonce: Nonce, ) -> Self

Canonical id_token config: JWT typ (distinct from access token’s at+jwt), EdDSA-only algorithm whitelist, 8 KB token size cap, RP-stored expected_nonce required.

pub fn with_algorithms(self, algorithms: Vec<Algorithm>) -> Self

Override the algorithm whitelist. Test-only escape hatch — production callers MUST go through id_token so EdDSA is the default, not an override.

pub fn with_access_token_binding(self, access_token: impl Into<String>) -> Self

M67 — bind verification to the access_token the RP just received. On verify, the engine asserts payload.at_hash == base64url(SHA-256(access_token)[..16]). Required when the response carries both id_token and access_token (hybrid flow code id_token token, implicit id_token token). Pure code flow consumers do not call this.

pub fn with_authorization_code_binding(self, code: impl Into<String>) -> Self

M68 — bind verification to the authorization code the RP just received at the redirect_uri. On verify, the engine asserts payload.c_hash == base64url(SHA-256(code)[..16]). Required when the hybrid response carries both id_token and code (code id_token, code id_token token). Pure implicit-flow consumers do not call this.

pub fn with_max_age(self, max_age: i64) -> Self

Phase 10.6 (M70) wire site. Inert in 10.1.C.

pub fn with_acr_values(self, acr_values: Vec<String>) -> Self

Phase 10.7 (M71) wire site. Inert in 10.1.C.

Trait Implementations

impl Clone for VerifyConfig

fn clone(&self) -> VerifyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.