Struct SnapTokenVerifier 

pub struct SnapTokenVerifier { /* private fields */ }

Verifies SNAP tokens against a statically configured key, keys fetched from a JWKS endpoint, or both.

• Tokens with a kid JWT header claim are verified using a key resolved from the JwksKeyStore. If no JWKS store is configured, the static key is used as a fallback.
• Tokens without a kid are verified using the static key, and are rejected outright by a verifier that has none.

Implementations

impl SnapTokenVerifier

pub fn new(static_key: DecodingKey) -> Self

Creates a verifier that only uses the statically configured key. Tokens with a kid header claim also use this key as a fallback when no JWKS store is configured.

pub fn from_jwks_store(store: Arc<JwksKeyStore>) -> Self

Creates a verifier that resolves every key from store, for a deployment whose tokens all carry the kid of the key that signed them. A token without one is rejected, since there is no key to fall back to.

pub fn with_jwks_store(self, store: Arc<JwksKeyStore>) -> Self

Attaches a JWKS store for resolving kid-bearing tokens.

pub async fn verify( &self, token: &str, ) -> Result<AnyClaims, SnapTokenVerifyError>

Verifies a SNAP token JWT and returns the parsed claims on success.

Key selection

• If the JWT header has a kid and a JWKS store is configured, the key is resolved from the JWKS store.
• Otherwise (no kid, or kid present but no JWKS store configured), the static key is used, and the token is rejected when the verifier has none.

Trait Implementations

impl Clone for SnapTokenVerifier

fn clone(&self) -> SnapTokenVerifier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.