Struct JwtVerifier 

pub struct JwtVerifier<C: Cache<String, Jwks>, H: HttpClient> {
    pub issuer_map: HashMap<String, String>,
    pub audience: String,
    pub http: Arc<H>,
    pub cache: Arc<C>,
    pub clock_skew_sec: i64,
    pub default_issuer: Option<String>,
}

Available on crate feature verifier only.

JWT Verifier for Resource Server

Fields

issuer_map: HashMap<String, String>

Map of tenant/host to issuer URL

audience: String

Expected audience

http: Arc<H>

HTTP client

cache: Arc<C>

JWKS cache

clock_skew_sec: i64

Clock skew tolerance in seconds

default_issuer: Option<String>

Default issuer if no mapping found

Implementations

impl<C: Cache<String, Jwks>, H: HttpClient> JwtVerifier<C, H>

pub fn new( issuer_map: HashMap<String, String>, audience: String, http: Arc<H>, cache: Arc<C>, ) -> Self

Create a new JWT verifier

pub fn builder() -> JwtVerifierBuilder<C, H>

Create a verifier builder

pub async fn verify(&self, bearer: &str) -> Result<VerifiedClaims>

Verify a bearer token

pub fn resolve_issuer_with_tenant(&self, tenant: &str) -> Result<String>

Resolve issuer with tenant context This method allows multi-tenant routing by selecting issuer based on tenant identifier