Module google 

Google service-account ID tokens. Key discovery stays off the HTTP handlers; an unknown key or an expired key set fails closed until refresh succeeds.

Structs

GoogleVerifier

Fixed issuer, RS256 only, explicit audience. sub is the stable Google account identifier; mutable email addresses do not grant a role.