Struct MultiKeyVerifier 

pub struct MultiKeyVerifier<C> { /* private fields */ }

Multi-algorithm verifier with per-kid rotation.

keys carries algorithm-keyed defaults; keys_by_kid adds an optional kid-keyed lookup that wins when the JWT header carries kid. Updating the kid map at runtime rotates without restarting.

Implementations

impl<C> MultiKeyVerifier<C>

pub fn new( keys: HashMap<&'static str, AnyVerifyKey, RandomState>, ) -> MultiKeyVerifier<C>

Builds a verifier with algorithm-only key selection.

pub fn rotate_key(&self, kid: impl Into<String>, key: AnyVerifyKey)

Adds / replaces the rotation key for kid.

pub fn revoke_kid(&self, kid: &str)

Removes the rotation key for kid.

pub fn constraints(self, c: VerifyConstraints) -> MultiKeyVerifier<C>

Sets per-claim verification constraints.

Trait Implementations

impl<C> Clone for MultiKeyVerifier<C>

fn clone(&self) -> MultiKeyVerifier<C>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<C> JwtVerifier for MultiKeyVerifier<C>

where C: Clone + Serialize + DeserializeOwned + Send + Sync + 'static,

type Claims = JWTClaims<C>

Decoded claims inserted into request extensions.

type Error = String

Verification error.

fn verify( &self, token: &str, ) -> Result<<MultiKeyVerifier<C> as JwtVerifier>::Claims, <MultiKeyVerifier<C> as JwtVerifier>::Error>

Verifies a raw JWT token string.

fn validate_constraints( &self, claims: &<MultiKeyVerifier<C> as JwtVerifier>::Claims, constraints: &VerifyConstraints, ) -> Result<(), ConstraintsNotSupported>

Validate iss / aud / leeway constraints against the decoded claims.