Struct OAuthValidator 

pub struct OAuthValidator { /* private fields */ }

Implementations

impl OAuthValidator

pub fn with_verifier( config: OAuthConfig, verifier: Box<dyn Fn(&Jwk, &[u8], &[u8]) -> Result<(), String> + Send + Sync>, ) -> OAuthValidator

Construct a validator with an explicit signature verifier. Tests pass a closure that always returns Ok(()); production code plugs a real RS256 / ES256 verifier.

pub fn set_jwks(&self, keys: Vec<Jwk>)

Replace the JWKS cache. Called by the initial fetch + the periodic refresh loop. Tests seed known keys directly.

pub fn config(&self) -> &OAuthConfig

pub fn extract_bearer(&self, header_value: &str) -> Option<String>

Extract a bearer token from an Authorization header value, or None when the header isn’t bearer-style.

pub fn validate<F>( &self, token: &DecodedJwt, now_unix_secs: i64, lookup_user: F, ) -> Result<OAuthIdentity, OAuthError>

where F: Fn(&str) -> Option<User>,

Validate a decoded token. now_unix_secs is injected so the caller controls the clock (tests freeze time; production passes SystemTime::now).