Struct OAuthValidator 

pub struct OAuthValidator { /* private fields */ }

JWT token validator with JWKS key caching.

Thread-safe — can be shared across handlers via Arc.

Implementations

impl OAuthValidator

pub fn new(config: OAuthConfig, http_client: Client) -> Self

Create a new validator with the given configuration.

The http_client is reused from the proxy’s existing reqwest client.

pub async fn validate_token( &self, auth_header: &str, ) -> Result<OAuthClaims, OAuthError>

Validate a Bearer token from the Authorization header value.

Returns the validated claims on success.

pub async fn validate_dpop_proof( &self, dpop_header: Option<&str>, access_token: &str, expected_method: &str, expected_uri: &str, token_claims: Option<&OAuthClaims>, ) -> Result<(), OAuthError>

Validate a DPoP proof for an already-authenticated access token.

pub fn config(&self) -> &OAuthConfig

Get the OAuth config (for pass-through decisions).